last executing test programs: 6m15.673971764s ago: executing program 32 (id=85): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x844) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x10}}, 0x804) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 6m10.706658176s ago: executing program 33 (id=204): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_adjtime(0xffffffd3, 0x0) 6m0.336673739s ago: executing program 34 (id=404): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 5m51.244904034s ago: executing program 35 (id=540): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r0, r1, 0x0, 0x7fffffff) writev(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)='0', 0x1}], 0x1) 5m38.115804167s ago: executing program 36 (id=854): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x80, 0xd754, 0x7f96}) 4m51.82995448s ago: executing program 37 (id=1909): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) 4m46.935461017s ago: executing program 38 (id=1986): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000000), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m44.255178621s ago: executing program 39 (id=2027): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x1, {0x1, 0x0, 0x1}, 0x2}, 0x18) 3m50.500181258s ago: executing program 40 (id=3385): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) fadvise64(r0, 0x8, 0x1, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 3m47.667249163s ago: executing program 41 (id=3418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000ac0)={@val={0x0, 0x18}, @void, @eth={@random="bae5670bc70e", @remote, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "5efdc2", 0x8, 0x0, 0x0, @empty, @mcast1, {[@dstopts={0x2f}]}}}}}}, 0x42) 3m22.647561424s ago: executing program 42 (id=4048): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m53.785432649s ago: executing program 43 (id=4714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc) 2m49.708692679s ago: executing program 44 (id=4767): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000240)="f9b1", 0x2}], 0x1, 0xf) write(r0, 0x0, 0x0) 2m30.088663358s ago: executing program 45 (id=5050): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)="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", 0x748}], 0x1, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x6) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2m24.036574955s ago: executing program 46 (id=4912): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x5e) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 2m22.004800074s ago: executing program 47 (id=5168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m15.486290262s ago: executing program 48 (id=5240): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0) 2m4.818976136s ago: executing program 49 (id=5454): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m24.312737012s ago: executing program 50 (id=6209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) close(r0) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m13.164642778s ago: executing program 51 (id=6443): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x1, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m12.782412375s ago: executing program 4 (id=6452): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) 1m12.55413601s ago: executing program 4 (id=6456): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x1096, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m12.306904818s ago: executing program 4 (id=6462): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x2, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0xa, 0xffe0}, {0xa, 0x5}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0x3}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m11.924991874s ago: executing program 4 (id=6470): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1005848, 0x0) 1m11.876721357s ago: executing program 4 (id=6474): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) socket(0x10, 0x3, 0x8) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m11.612219055s ago: executing program 4 (id=6477): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) 1m11.594983657s ago: executing program 52 (id=6477): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) 1m10.951567691s ago: executing program 7 (id=6480): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@rand_addr=' \x01\x00', 0x18, r2}) sendmsg$NL80211_CMD_SET_PMKSA(r0, 0x0, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1m10.81268633s ago: executing program 7 (id=6484): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)}, 0xc44}], 0x4000000000001d4, 0x1820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x6d91fb6102d8195c, 0x0, 0x0) 1m10.759521044s ago: executing program 7 (id=6487): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000370427bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="61050500000000001c0012800b00010067726574617000000c00028008000700ac1414"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r2, 0x7}, 0x80, 0x0}}], 0x1, 0x80) 1m10.588458516s ago: executing program 7 (id=6493): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$cgroup_devices(r0, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 1m10.22488861s ago: executing program 7 (id=6497): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/50, 0x32) getdents(r2, 0xfffffffffffffffd, 0x58) 1m9.882255044s ago: executing program 7 (id=6507): r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.837249527s ago: executing program 53 (id=6507): r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.524074924s ago: executing program 1 (id=6508): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 1m5.365288245s ago: executing program 1 (id=6542): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 1m5.277012711s ago: executing program 1 (id=6544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000005940)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x40854) 1m5.077047255s ago: executing program 1 (id=6547): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$cgroup_devices(r0, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 1m4.496980895s ago: executing program 1 (id=6556): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m2.865016477s ago: executing program 1 (id=6572): socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, 0x0, 0x101041, 0x15) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 1m2.838511369s ago: executing program 54 (id=6572): socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, 0x0, 0x101041, 0x15) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 52.627749181s ago: executing program 3 (id=6698): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 51.994853624s ago: executing program 3 (id=6716): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa14, &(0x7f0000001840)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x7fff, 0x1a, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 51.127966374s ago: executing program 3 (id=6735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4ea3, 0x20000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@ccm_128={{0x304}, "b89bf20239a32573", "fd616c432f8aaf2c1a09e2be096776e8", "f6225af5", "bd61142273958f75"}, 0x28) 50.951766496s ago: executing program 3 (id=6736): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 50.951197246s ago: executing program 3 (id=6737): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc844}, 0x4000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc9e, &(0x7f0000000040)={0x0, 0x40dd, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 50.716370962s ago: executing program 3 (id=6743): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x63aa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfe59}, 0xdb30}], 0x3fffffffffffe38, 0x40002142, 0x0) 50.651619097s ago: executing program 55 (id=6743): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x63aa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfe59}, 0xdb30}], 0x3fffffffffffe38, 0x40002142, 0x0) 10.532804626s ago: executing program 2 (id=7563): r0 = socket(0x10, 0x2, 0x0) epoll_create1(0x0) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x54) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.511408677s ago: executing program 2 (id=7565): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000010) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) 9.473156468s ago: executing program 2 (id=7584): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x48e4, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) 8.748102899s ago: executing program 2 (id=7601): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000300)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRES64, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff3030303030313737373737373737f9909fdfd4291a9ccfbbdb0556c0f39fdb37372c004c0f1208ec0c34b7df4ba1b5e6b76697434de7574db9bcaef6a61212c3f260bebc7ac5b1b113e1119b83f1cf9f686b3dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7acab1c2e7b6a547f8120c12a14b06fb302b8adb87fa67ab868940868fee39f0796736ccd4adf62186a216263c1322da47b156791f49bf9e904cf364616ba0d1bf1"], 0x1, 0x291, &(0x7f0000000740)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xa9ec, 0x0, 0x12, 0xd, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d69b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400) 8.405049592s ago: executing program 2 (id=7607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.818420182s ago: executing program 2 (id=7618): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) 7.764664916s ago: executing program 56 (id=7618): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) 2.946933868s ago: executing program 8 (id=7687): r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc804, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1ff) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) 2.857913444s ago: executing program 8 (id=7690): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000000}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000000}}}, 0x10, 0x0}, 0x0) 2.852799854s ago: executing program 5 (id=7692): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 2.783122379s ago: executing program 8 (id=7693): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x800, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.701167254s ago: executing program 5 (id=7697): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) write$9p(r1, &(0x7f0000000100)="d5", 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'hugetlb'}]}, 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 2.642524198s ago: executing program 5 (id=7699): fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2.538216076s ago: executing program 5 (id=7702): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xb) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) flock(0xffffffffffffffff, 0x2) open(0x0, 0x8080, 0x12e) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) 1.911146739s ago: executing program 8 (id=7712): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) 1.230977435s ago: executing program 0 (id=7719): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000006) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 1.135624362s ago: executing program 0 (id=7721): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x804) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 939.218716ms ago: executing program 0 (id=7724): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 914.051458ms ago: executing program 5 (id=7725): ioperm(0x7, 0x81, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) 913.679788ms ago: executing program 8 (id=7726): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000440)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x18000000000002a0, 0xff5c, 0x0, &(0x7f00000002c0)="0300000000000000ff9e14f086dd", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 913.402147ms ago: executing program 0 (id=7727): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) open(&(0x7f0000000040)='./bus\x00', 0x943, 0x20) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) pipe(&(0x7f0000000000)) pselect6(0x40, &(0x7f0000000340)={0x5, 0x2000000000000, 0x9, 0x9, 0x0, 0x53, 0xffffffffffffc539, 0x40}, 0x0, &(0x7f00000001c0)={0x3ff, 0x1bc, 0x20000, 0x9, 0x2, 0x2, 0x2}, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 644.115206ms ago: executing program 8 (id=7729): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 330.971197ms ago: executing program 6 (id=7737): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3f, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020058"], 0x0) syz_emit_ethernet(0x3f, &(0x7f0000001380)=ANY=[@ANYBLOB="e727dc07001faaaaaaaaaabb86dd609907a600092c03cb697a653e336f000000500000000000ff020000000000000000000000000001f00040"], 0x0) 330.805048ms ago: executing program 9 (id=7738): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000010000000000", 0x58}], 0x1) 265.959842ms ago: executing program 6 (id=7739): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 265.374252ms ago: executing program 9 (id=7740): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3, 0x2}}, @TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x3}}]}}}]}, 0x8c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 259.551543ms ago: executing program 6 (id=7741): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010027bd7084ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14460700016a030024001280110001006272696467655f736c617661000000000c0005800500010033"], 0x44}, 0x1, 0x0, 0x0, 0x2400c081}, 0x8002) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 191.084997ms ago: executing program 6 (id=7742): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 183.948078ms ago: executing program 9 (id=7743): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001000)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 158.38361ms ago: executing program 9 (id=7744): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 133.644071ms ago: executing program 9 (id=7745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 129.648081ms ago: executing program 6 (id=7746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), 0x0}, 0x20) 65.458416ms ago: executing program 5 (id=7747): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x2, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x67ce, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 52.180996ms ago: executing program 0 (id=7748): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xe, 0x1e, 0x3, 0x4, 0x0, 0x8, 0x8c780, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000280), 0xb}, 0x19800, 0x6edb, 0xfffffff9, 0x7, 0xc2, 0x6, 0xb7c, 0x0, 0xb964, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 21.123468ms ago: executing program 6 (id=7749): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) 7.80681ms ago: executing program 0 (id=7750): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@mss, @mss={0x2, 0x2}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 0s ago: executing program 9 (id=7751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x6c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): g over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.711660][T25116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.740027][T25116] hsr_slave_0: entered promiscuous mode [ 340.746381][T25116] hsr_slave_1: entered promiscuous mode [ 340.752355][T25116] debugfs: 'hsr0' already exists in 'hsr' [ 340.758239][T25116] Cannot create hsr debugfs directory [ 340.907693][T25231] chnl_net:caif_netlink_parms(): no params data found [ 340.962159][T25231] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.969498][T25231] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.977237][T25231] bridge_slave_0: entered allmulticast mode [ 340.983637][T25231] bridge_slave_0: entered promiscuous mode [ 340.990534][T25231] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.997745][T25231] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.004944][T25231] bridge_slave_1: entered allmulticast mode [ 341.013133][T25231] bridge_slave_1: entered promiscuous mode [ 341.038111][T25231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.050797][T25231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.080467][T25231] team0: Port device team_slave_0 added [ 341.098210][ T8856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.109845][ T8856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.127839][T25231] team0: Port device team_slave_1 added [ 341.154307][T25231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.163594][T25231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.198537][T25231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.212876][ T8856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.252076][ T8856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.276030][T25231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.287183][T25231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.316418][T25231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.357378][ T8856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.383918][ T8856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.412514][T25116] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 341.449104][T25116] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 341.470813][ T8856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.481368][ T8856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.499298][T25325] gretap1: entered promiscuous mode [ 341.512986][T25116] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 341.526324][T25116] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 341.542941][T25231] hsr_slave_0: entered promiscuous mode [ 341.549524][T25231] hsr_slave_1: entered promiscuous mode [ 341.565126][T25231] debugfs: 'hsr0' already exists in 'hsr' [ 341.575343][T25231] Cannot create hsr debugfs directory [ 341.597495][T25349] netlink: 'syz.5.6492': attribute type 1 has an invalid length. [ 341.611828][T25349] netlink: 'syz.5.6492': attribute type 22 has an invalid length. [ 341.655108][T25358] loop7: detected capacity change from 0 to 1024 [ 341.684449][T25358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 341.699227][T25349] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.706414][T25349] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.734232][ T28] audit: type=1400 audit(1776218780.971:2309): avc: denied { mounton } for pid=25352 comm="syz.7.6493" path="/198/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 341.797055][ T8856] bridge_slave_1: left allmulticast mode [ 341.802792][ T8856] bridge_slave_1: left promiscuous mode [ 341.809042][T25358] loop7: detected capacity change from 1024 to 64 [ 341.823523][T25372] syz.7.6493: attempt to access beyond end of device [ 341.823523][T25372] loop7: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 341.848897][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.860608][ T8856] bridge_slave_0: left allmulticast mode [ 341.866911][T25372] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 128) [ 341.879375][ T8856] bridge_slave_0: left promiscuous mode [ 341.885064][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.892693][T25372] Buffer I/O error on device loop7, logical block 128 [ 342.002657][T25114] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 342.026692][T25361] kmmpd-loop7: attempt to access beyond end of device [ 342.026692][T25361] loop7: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 342.041221][T25361] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 342.058518][ T8856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.079655][ T8856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.097941][ T8856] bond0 (unregistering): Released all slaves [ 342.182159][ T8856] hsr_slave_0: left promiscuous mode [ 342.192098][ T8856] hsr_slave_1: left promiscuous mode [ 342.198191][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.208201][ T8856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.226162][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.233550][ T8856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.265395][ T8856] veth1_macvtap: left promiscuous mode [ 342.270922][ T8856] veth0_macvtap: left promiscuous mode [ 342.278560][ T8856] veth1_vlan: left promiscuous mode [ 342.283937][ T8856] veth0_vlan: left promiscuous mode [ 342.394185][ T8856] team0 (unregistering): Port device team_slave_1 removed [ 342.412773][ T8856] team0 (unregistering): Port device team_slave_0 removed [ 342.514895][T25116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.548545][T25116] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.560135][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.567286][ T8862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.589281][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.596458][ T8858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.733197][T25116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.748423][T25480] netlink: 'syz.5.6512': attribute type 1 has an invalid length. [ 342.768691][T25437] chnl_net:caif_netlink_parms(): no params data found [ 342.812046][ T8856] IPVS: stop unused estimator thread 0... [ 342.863657][T25437] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.871340][T25437] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.878992][T25437] bridge_slave_0: entered allmulticast mode [ 342.887341][T25437] bridge_slave_0: entered promiscuous mode [ 342.900790][T25437] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.908384][T25437] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.916339][T25437] bridge_slave_1: entered allmulticast mode [ 342.923238][T25437] bridge_slave_1: entered promiscuous mode [ 342.962056][ T8856] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.974847][ T8856] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.985838][ T8856] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 343.018127][T25437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.052579][T25437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.079375][ T8856] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.090111][ T8856] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.108326][ T8856] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 343.150298][T25437] team0: Port device team_slave_0 added [ 343.196996][T25437] team0: Port device team_slave_1 added [ 343.213764][ T8856] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.225046][ T8856] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.243999][ T8856] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 343.333120][T25437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.340343][T25437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.403117][T25437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.414693][T25437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.424846][T25437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.487403][T25437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.536703][T25116] veth0_vlan: entered promiscuous mode [ 343.544657][T25437] hsr_slave_0: entered promiscuous mode [ 343.551445][T25437] hsr_slave_1: entered promiscuous mode [ 343.557367][T25437] debugfs: 'hsr0' already exists in 'hsr' [ 343.563089][T25437] Cannot create hsr debugfs directory [ 343.571064][ T8856] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode [ 343.584644][ T8856] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.595068][ T8856] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.613390][ T8856] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 343.634128][T25231] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 343.655620][T25231] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 343.666983][T25231] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.706794][T25231] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 343.716181][T25116] veth1_vlan: entered promiscuous mode [ 343.744381][T25546] tmpfs: Unknown parameter 'usrquota0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.744381][T25546] 0 [ 343.978124][T25116] veth0_macvtap: entered promiscuous mode [ 344.025939][T25116] veth1_macvtap: entered promiscuous mode [ 344.069148][ T8856] bridge_slave_1: left allmulticast mode [ 344.074860][ T8856] bridge_slave_1: left promiscuous mode [ 344.095455][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.196095][ T8856] bond2 (unregistering): (slave geneve2): Releasing active interface [ 344.291157][ T8856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.306066][ T8856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.315886][ T8856] bond0 (unregistering): Released all slaves [ 344.323290][ T8856] bond1 (unregistering): Released all slaves [ 344.331595][ T8856] bond2 (unregistering): Released all slaves [ 344.348705][T25116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.358614][T25116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.377687][ T8856] hsr_slave_0: left promiscuous mode [ 344.383461][ T8856] hsr_slave_1: left promiscuous mode [ 344.389377][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.397079][ T8856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.404699][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.413051][ T8856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.422873][ T8856] veth1_macvtap: left promiscuous mode [ 344.428414][ T8856] veth0_macvtap: left promiscuous mode [ 344.433942][ T8856] veth1_vlan: left promiscuous mode [ 344.439865][ T8856] veth0_vlan: left promiscuous mode [ 344.513203][ T8856] team0 (unregistering): Port device team_slave_1 removed [ 344.522854][ T8856] team0 (unregistering): Port device team_slave_0 removed [ 344.566568][ T70] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.575593][ T70] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.606661][ T70] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.619657][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.649130][T25231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.679140][T25231] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.707385][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.714500][ T8855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.746773][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.753960][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.817814][T25231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.834871][T25614] loop8: detected capacity change from 0 to 8192 [ 344.841249][T25231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.009795][T25231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.098880][T25437] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.128830][T25437] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.160287][T25437] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.172474][T25437] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.280586][T25437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.332356][T25231] veth0_vlan: entered promiscuous mode [ 345.346129][T25437] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.375418][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.382714][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.397932][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.405030][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.434127][T25437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.447942][T25437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.467728][T25231] veth1_vlan: entered promiscuous mode [ 345.493002][T25231] veth0_macvtap: entered promiscuous mode [ 345.521287][T25231] veth1_macvtap: entered promiscuous mode [ 345.567834][T25231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.609151][T25231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.639146][ T8855] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.665686][ T8855] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.674469][ T8855] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.695925][T25437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.704001][ T8855] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.854622][T25697] loop8: detected capacity change from 0 to 512 [ 345.912045][T25708] syzkaller1: entered promiscuous mode [ 345.925376][T25708] syzkaller1: entered allmulticast mode [ 345.941326][T25437] veth0_vlan: entered promiscuous mode [ 345.986236][T25437] veth1_vlan: entered promiscuous mode [ 346.020829][T25437] veth0_macvtap: entered promiscuous mode [ 346.045151][T25437] veth1_macvtap: entered promiscuous mode [ 346.067811][T25437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.086802][T25437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.128146][ T309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.155424][ T309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.164163][ T309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.200631][ T309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.690654][T25741] netlink: 372 bytes leftover after parsing attributes in process `syz.1.6508'. [ 346.909956][T25746] loop6: detected capacity change from 0 to 8192 [ 347.008987][T25771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6546'. [ 347.103035][T25777] loop1: detected capacity change from 0 to 1024 [ 347.236157][T25777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 347.345314][T25777] loop1: detected capacity change from 1024 to 64 [ 347.382526][T25777] syz.1.6547: attempt to access beyond end of device [ 347.382526][T25777] loop1: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 347.394401][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6551'. [ 347.454830][T25777] EXT4-fs warning (device loop1): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 128) [ 347.532773][T25777] Buffer I/O error on device loop1, logical block 128 [ 347.535651][T25811] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6551'. [ 347.713014][T25843] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6557'. [ 347.760911][T25846] xt_hashlimit: size too large, truncated to 1048576 [ 348.290681][T25872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.562063][T25894] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6565'. [ 348.771990][T25908] loop8: detected capacity change from 0 to 512 [ 348.805909][T25908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 348.847183][T25908] EXT4-fs warning (device loop8): dx_probe:837: inode #2: comm syz.8.6567: Unimplemented hash flags: 0x0001 [ 348.956332][T25908] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6567: Corrupt directory, running e2fsck is recommended [ 349.039521][T25920] EXT4-fs warning (device loop8): dx_probe:837: inode #2: comm syz.8.6567: Unimplemented hash flags: 0x0001 [ 349.062430][T25920] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6567: Corrupt directory, running e2fsck is recommended [ 349.133324][T25908] EXT4-fs warning (device loop8): dx_probe:837: inode #2: comm syz.8.6567: Unimplemented hash flags: 0x0001 [ 349.145933][T25908] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6567: Corrupt directory, running e2fsck is recommended [ 349.203069][T25908] EXT4-fs warning (device loop8): dx_probe:837: inode #2: comm syz.8.6567: Unimplemented hash flags: 0x0001 [ 349.215677][T25437] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 349.223508][T25908] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6567: Corrupt directory, running e2fsck is recommended [ 349.241314][T25793] kmmpd-loop1: attempt to access beyond end of device [ 349.241314][T25793] loop1: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 349.256204][ T8856] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.275137][T25793] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 349.295298][T25920] EXT4-fs warning (device loop8): dx_probe:837: inode #2: comm syz.8.6567: Unimplemented hash flags: 0x0001 [ 349.323603][T25920] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.6567: Corrupt directory, running e2fsck is recommended [ 349.339088][ T8856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.431543][ T8856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.479512][T25960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6586'. [ 349.554491][ T8856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.618959][T25116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.624823][T25973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6580'. [ 349.756325][T25993] loop8: detected capacity change from 0 to 128 [ 349.789756][ T8856] bridge_slave_1: left allmulticast mode [ 349.809035][ T8856] bridge_slave_1: left promiscuous mode [ 349.814714][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.844619][ T8856] bridge_slave_0: left allmulticast mode [ 349.852003][ T8856] bridge_slave_0: left promiscuous mode [ 349.861640][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.994713][T26008] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6588'. [ 350.032884][T26008] netlink: 'syz.9.6588': attribute type 7 has an invalid length. [ 350.041486][T26008] netlink: 'syz.9.6588': attribute type 8 has an invalid length. [ 350.063690][ T8856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.080468][T26008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6588'. [ 350.092218][ T8856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.102437][ T8856] bond0 (unregistering): Released all slaves [ 350.167525][ T8856] hsr_slave_0: left promiscuous mode [ 350.201076][ T8856] hsr_slave_1: left promiscuous mode [ 350.222164][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.260816][ T8856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.286902][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.294725][ T8856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.334782][ T8856] veth1_macvtap: left promiscuous mode [ 350.348978][ T8856] veth0_macvtap: left promiscuous mode [ 350.354652][ T8856] veth1_vlan: left promiscuous mode [ 350.367574][ T8856] veth0_vlan: left promiscuous mode [ 350.461086][ T8856] team0 (unregistering): Port device team_slave_1 removed [ 350.483808][ T8856] team0 (unregistering): Port device team_slave_0 removed [ 350.533379][T26020] lo: Caught tx_queue_len zero misconfig [ 350.656224][T26038] netlink: 'syz.9.6593': attribute type 5 has an invalid length. [ 350.697721][T25961] chnl_net:caif_netlink_parms(): no params data found [ 350.819131][T25961] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.855178][T25961] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.888095][T25961] bridge_slave_0: entered allmulticast mode [ 350.922257][T25961] bridge_slave_0: entered promiscuous mode [ 350.951242][T25961] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.978212][T25961] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.015986][T25961] bridge_slave_1: entered allmulticast mode [ 351.028138][T25961] bridge_slave_1: entered promiscuous mode [ 351.094251][T25961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.114470][T25961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.135036][T25961] team0: Port device team_slave_0 added [ 351.141795][T25961] team0: Port device team_slave_1 added [ 351.174752][T25961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.181908][T25961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.212199][T25961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.251503][T25961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.290916][T25961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.319949][T25961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.386218][T25961] hsr_slave_0: entered promiscuous mode [ 351.392448][T25961] hsr_slave_1: entered promiscuous mode [ 351.398590][T25961] debugfs: 'hsr0' already exists in 'hsr' [ 351.404375][T25961] Cannot create hsr debugfs directory [ 351.857001][T26143] loop8: detected capacity change from 0 to 4096 [ 351.877077][T25961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.887055][T25961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.910663][T25961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.917955][T26143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.940892][T25961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.956483][ T28] audit: type=1326 audit(1776218791.191:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26142 comm="syz.8.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee45c819 code=0x7ffc0000 [ 351.988302][ T28] audit: type=1326 audit(1776218791.191:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26142 comm="syz.8.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1fee45c819 code=0x7ffc0000 [ 352.012428][ T28] audit: type=1326 audit(1776218791.191:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26142 comm="syz.8.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee45c819 code=0x7ffc0000 [ 352.036558][ T28] audit: type=1326 audit(1776218791.191:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26142 comm="syz.8.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee45c819 code=0x7ffc0000 [ 352.060353][ T28] audit: type=1326 audit(1776218791.191:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26142 comm="syz.8.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f1fee45c819 code=0x7ffc0000 [ 352.084550][ T28] audit: type=1326 audit(1776218791.201:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26142 comm="syz.8.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee45c819 code=0x7ffc0000 [ 352.129298][ T28] audit: type=1326 audit(1776218791.201:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26142 comm="syz.8.6614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fee45c819 code=0x7ffc0000 [ 352.152600][T25961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.161002][T25116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.174399][T25961] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.195830][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.202960][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.217156][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.224236][ T8858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.250676][T25961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.267975][T25961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.344795][T25961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.447386][T25961] veth0_vlan: entered promiscuous mode [ 352.462225][T25961] veth1_vlan: entered promiscuous mode [ 352.477634][T25961] veth0_macvtap: entered promiscuous mode [ 352.494855][T25961] veth1_macvtap: entered promiscuous mode [ 352.551384][T25961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.573608][T25961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.590414][ T309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.604422][ T309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.619172][ T309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.630892][ T309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.168625][T26233] __nla_validate_parse: 2 callbacks suppressed [ 353.168646][T26233] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6626'. [ 353.778228][T26259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6636'. [ 353.820367][T26265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6638'. [ 353.895720][T26265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6638'. [ 353.897111][ T309] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.975303][ T309] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.005131][ T309] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.051761][ T309] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.092983][T26290] netlink: 'syz.8.6643': attribute type 1 has an invalid length. [ 354.123316][T26290] bond1: entered promiscuous mode [ 354.134404][T26290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.161575][T26290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.213651][T26290] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 354.242495][T26290] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 354.261043][T26290] bond1: (slave vcan1): making interface the new active one [ 354.288214][T26290] vcan1: entered promiscuous mode [ 354.309316][T26290] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 354.769550][T26331] loop3: detected capacity change from 0 to 512 [ 354.828157][T26331] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 354.903094][T26331] EXT4-fs (loop3): 1 truncate cleaned up [ 354.944292][T26331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.220719][T25961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.309423][T26382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6652'. [ 355.473887][T26392] loop3: detected capacity change from 0 to 1024 [ 355.497794][T26392] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 355.508317][T26388] bridge1: entered promiscuous mode [ 355.538711][T26392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.551860][T26388] bridge1: entered allmulticast mode [ 355.693830][T26392] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 355.777630][T26392] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 355.836440][T25961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.144217][T26430] netlink: 'syz.6.6669': attribute type 1 has an invalid length. [ 356.158866][T26432] loop3: detected capacity change from 0 to 2048 [ 356.191079][T26432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.272131][T26443] loop6: detected capacity change from 0 to 2048 [ 356.302006][T26432] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.331145][T26443] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 356.401847][T26443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.488420][T25961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.517925][T25231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.639878][T26468] loop8: detected capacity change from 0 to 512 [ 356.662687][T26468] EXT4-fs: Ignoring removed nobh option [ 356.705760][T26468] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 356.755791][T26468] EXT4-fs (loop8): 1 truncate cleaned up [ 356.761968][T26468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.851467][ T28] audit: type=1326 audit(1776218796.091:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 356.893783][T25116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.952957][ T28] audit: type=1326 audit(1776218796.091:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.046179][ T28] audit: type=1326 audit(1776218796.091:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.126186][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6679'. [ 357.152450][T26502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6679'. [ 357.155514][ T28] audit: type=1326 audit(1776218796.091:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.238886][T26484] bridge1: entered promiscuous mode [ 357.249744][ T28] audit: type=1326 audit(1776218796.091:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.275513][T26484] bridge1: entered allmulticast mode [ 357.277155][ T28] audit: type=1326 audit(1776218796.091:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.304963][ T28] audit: type=1326 audit(1776218796.091:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.329525][ T28] audit: type=1326 audit(1776218796.091:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.353261][ T28] audit: type=1326 audit(1776218796.091:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.430798][T26510] loop8: detected capacity change from 0 to 128 [ 357.456033][T26510] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.472302][ T28] audit: type=1326 audit(1776218796.091:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.496083][ T28] audit: type=1326 audit(1776218796.091:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.519878][ T28] audit: type=1326 audit(1776218796.091:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26489 comm="syz.9.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 357.550577][T26510] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.598707][T26522] loop3: detected capacity change from 0 to 512 [ 357.649579][T26522] EXT4-fs: Ignoring removed nobh option [ 357.689216][T26522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 357.729605][T26522] EXT4-fs (loop3): 1 truncate cleaned up [ 357.752981][T26522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.854231][T25116] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.520332][T25961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.640976][T26680] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6703'. [ 359.687312][T26680] gtp0: entered promiscuous mode [ 360.280003][T26735] loop3: detected capacity change from 0 to 1764 [ 360.339056][T26743] loop8: detected capacity change from 0 to 512 [ 360.429127][T26743] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.480531][T26743] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.555948][T25116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.664538][T26774] bridge0: entered promiscuous mode [ 360.680242][T26774] macvlan2: entered allmulticast mode [ 360.692610][T26774] bridge0: entered allmulticast mode [ 360.714519][T26774] bridge0: port 3(macvlan2) entered blocking state [ 360.731782][T26774] bridge0: port 3(macvlan2) entered disabled state [ 361.150038][T26774] bridge0: left allmulticast mode [ 361.201407][T26774] bridge0: left promiscuous mode [ 361.436578][T26874] netlink: 'syz.8.6742': attribute type 1 has an invalid length. [ 361.461128][T26874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.500439][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.525390][T26874] bond2: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 361.554841][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.629619][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.679314][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.770369][ T70] bridge_slave_1: left allmulticast mode [ 361.776833][ T70] bridge_slave_1: left promiscuous mode [ 361.782560][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.791492][ T70] bridge_slave_0: left allmulticast mode [ 361.797502][ T70] bridge_slave_0: left promiscuous mode [ 361.803173][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.887598][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.897850][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.910589][ T70] bond0 (unregistering): Released all slaves [ 361.953037][T26890] chnl_net:caif_netlink_parms(): no params data found [ 361.976239][ T70] hsr_slave_0: left promiscuous mode [ 361.982240][ T70] hsr_slave_1: left promiscuous mode [ 361.988874][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.996772][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.009426][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.018680][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.032272][ T70] veth1_macvtap: left promiscuous mode [ 362.037974][ T70] veth0_macvtap: left promiscuous mode [ 362.043561][ T70] veth1_vlan: left promiscuous mode [ 362.050103][ T70] veth0_vlan: left promiscuous mode [ 362.127538][ T70] team0 (unregistering): Port device team_slave_1 removed [ 362.139067][ T70] team0 (unregistering): Port device team_slave_0 removed [ 362.202958][T26890] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.210290][T26890] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.217627][T26890] bridge_slave_0: entered allmulticast mode [ 362.224225][T26890] bridge_slave_0: entered promiscuous mode [ 362.232333][T26890] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.245720][T26890] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.252894][T26890] bridge_slave_1: entered allmulticast mode [ 362.259716][T26890] bridge_slave_1: entered promiscuous mode [ 362.283058][T26890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.295082][T26890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.317172][T26890] team0: Port device team_slave_0 added [ 362.323895][T26890] team0: Port device team_slave_1 added [ 362.339657][T26890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.347631][T26890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.373920][T26890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.388433][T26890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.395609][T26890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.421572][T26890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.447097][T26890] hsr_slave_0: entered promiscuous mode [ 362.453253][T26890] hsr_slave_1: entered promiscuous mode [ 362.459323][T26890] debugfs: 'hsr0' already exists in 'hsr' [ 362.465135][T26890] Cannot create hsr debugfs directory [ 362.733963][T26890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.744325][T26890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.753392][T26890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.762818][T26890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.811335][T26890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.827683][T26890] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.845427][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.852530][ T8862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.868423][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.875597][ T8858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.946636][T26890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.018113][T26890] veth0_vlan: entered promiscuous mode [ 363.027379][T26890] veth1_vlan: entered promiscuous mode [ 363.044400][T26890] veth0_macvtap: entered promiscuous mode [ 363.052483][T26890] veth1_macvtap: entered promiscuous mode [ 363.064438][T26890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.085652][T26890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.098664][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.107694][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.121718][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.131256][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.825722][T27117] netlink: 'syz.9.6760': attribute type 29 has an invalid length. [ 363.865859][T27117] netlink: 'syz.9.6760': attribute type 29 has an invalid length. [ 364.120013][T27137] macvlan2: entered allmulticast mode [ 364.148100][T27137] bridge0: port 3(macvlan2) entered blocking state [ 364.164120][T27137] bridge0: port 3(macvlan2) entered disabled state [ 364.745972][T27180] bridge1: entered promiscuous mode [ 364.770891][T27180] bridge1: entered allmulticast mode [ 365.664526][T27251] bridge0: entered promiscuous mode [ 365.793282][T27251] macvlan2: entered allmulticast mode [ 365.860678][T27251] bridge0: entered allmulticast mode [ 365.916638][T27251] bridge0: port 3(macvlan2) entered blocking state [ 365.950838][T27251] bridge0: port 3(macvlan2) entered disabled state [ 366.002343][T27251] bridge0: left allmulticast mode [ 366.022469][T27251] bridge0: left promiscuous mode [ 366.060471][T27279] loop8: detected capacity change from 0 to 128 [ 366.088731][T27279] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.126164][T27279] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.235570][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 366.235586][ T28] audit: type=1400 audit(1776218805.461:2333): avc: denied { rename } for pid=27278 comm="syz.8.6790" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 366.355130][T25116] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.663557][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6796'. [ 366.739795][T27321] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.819935][T27321] bridge_slave_0 (unregistering): left allmulticast mode [ 366.866389][T27321] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.413337][T27361] bridge1: entered promiscuous mode [ 367.455763][T27361] bridge1: entered allmulticast mode [ 368.053397][ T8855] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.067483][ T8855] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.133744][ T8855] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.187436][ T8855] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.280627][ T8855] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.292985][ T8855] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.378998][ T8855] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.400061][ T8855] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.558392][ T8855] bridge_slave_1: left allmulticast mode [ 368.564156][ T8855] bridge_slave_1: left promiscuous mode [ 368.576414][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.585978][ T8855] bridge_slave_0: left allmulticast mode [ 368.591638][ T8855] bridge_slave_0: left promiscuous mode [ 368.601006][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.664951][T27535] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6848'. [ 368.740641][T27538] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6848'. [ 368.789748][ T8855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.802644][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6851'. [ 368.814327][ T8855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.824121][ T8855] bond0 (unregistering): Released all slaves [ 368.831905][ T8855] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 368.840522][ T8855] vcan1: left promiscuous mode [ 368.846398][ T8855] bond1 (unregistering): Released all slaves [ 368.854770][ T8855] bond2 (unregistering): (slave veth1_to_team): Removing an active aggregator [ 368.864354][ T8855] bond2 (unregistering): (slave veth1_to_team): Releasing backup interface [ 368.875642][ T8855] bond2 (unregistering): Released all slaves [ 368.884496][T27535] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.900350][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6851'. [ 368.912073][T27472] chnl_net:caif_netlink_parms(): no params data found [ 368.977155][ T8855] hsr_slave_0: left promiscuous mode [ 368.985914][ T8855] hsr_slave_1: left promiscuous mode [ 369.007681][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.015083][ T8855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.046528][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.056391][ T8855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.079697][ T8855] veth1_macvtap: left promiscuous mode [ 369.085387][ T8855] veth0_macvtap: left promiscuous mode [ 369.093412][ T8855] veth1_vlan: left promiscuous mode [ 369.106619][ T8855] veth0_vlan: left promiscuous mode [ 369.173691][T27573] netlink: 'syz.5.6856': attribute type 3 has an invalid length. [ 369.202954][T27573] netlink: 'syz.5.6856': attribute type 1 has an invalid length. [ 369.220828][T27573] netlink: 198116 bytes leftover after parsing attributes in process `syz.5.6856'. [ 369.312223][ T8855] team0 (unregistering): Port device team_slave_1 removed [ 369.331491][ T8855] team0 (unregistering): Port device team_slave_0 removed [ 369.522485][T27584] syzkaller0: entered promiscuous mode [ 369.535361][T27584] syzkaller0: entered allmulticast mode [ 369.595743][T27472] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.603121][T27472] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.610930][T27472] bridge_slave_0: entered allmulticast mode [ 369.618734][T27472] bridge_slave_0: entered promiscuous mode [ 369.635528][T27472] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.642820][T27472] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.650430][T27472] bridge_slave_1: entered allmulticast mode [ 369.657276][T27472] bridge_slave_1: entered promiscuous mode [ 369.787188][T27472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.807120][T27472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.866826][T27472] team0: Port device team_slave_0 added [ 369.894507][T27472] team0: Port device team_slave_1 added [ 369.935099][T27472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.943594][T27472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.977719][T27472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.005101][T27472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.012988][T27472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.045518][T27472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.099598][T27472] hsr_slave_0: entered promiscuous mode [ 370.111038][T27472] hsr_slave_1: entered promiscuous mode [ 370.119781][T27472] debugfs: 'hsr0' already exists in 'hsr' [ 370.125665][T27472] Cannot create hsr debugfs directory [ 370.148782][T27629] sctp: [Deprecated]: syz.2.6870 (pid 27629) Use of int in max_burst socket option deprecated. [ 370.148782][T27629] Use struct sctp_assoc_value instead [ 370.616740][T27472] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 370.637072][T27472] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 370.652808][T27472] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 370.689515][T27472] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 370.807433][T27472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.842694][T27472] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.865748][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.870849][T27704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6879'. [ 370.872828][ T8862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.904653][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.911732][ T8862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.965366][ T28] audit: type=1326 audit(1776219066.198:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 370.992280][ T28] audit: type=1326 audit(1776219066.198:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 371.044982][ T28] audit: type=1326 audit(1776219066.198:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 371.071263][ T28] audit: type=1326 audit(1776219066.198:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 371.112911][ T28] audit: type=1326 audit(1776219066.228:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 371.161014][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bcb5800: rx timeout, send abort [ 371.169332][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bcb5800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 371.210299][T27472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.276364][ T28] audit: type=1326 audit(1776219066.228:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 371.343653][ T28] audit: type=1326 audit(1776219066.228:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 371.377795][ T28] audit: type=1326 audit(1776219066.228:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 371.412055][ T28] audit: type=1326 audit(1776219066.348:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27717 comm="syz.9.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 371.549601][T27472] veth0_vlan: entered promiscuous mode [ 371.571909][T27794] bond0: entered allmulticast mode [ 371.584684][T27794] gre3: entered allmulticast mode [ 371.605089][T27472] veth1_vlan: entered promiscuous mode [ 371.627035][T27794] bond0: left allmulticast mode [ 371.644144][T27794] gre3: left allmulticast mode [ 371.674252][T27801] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6902'. [ 371.686073][ T28] audit: type=1400 audit(1776219066.908:2343): avc: denied { module_load } for pid=27804 comm="syz.2.6903" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=79674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 371.723506][T27472] veth0_macvtap: entered promiscuous mode [ 371.750486][T27472] veth1_macvtap: entered promiscuous mode [ 371.772029][T27472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.790680][T27472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.833015][ T8862] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.872292][ T8862] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.903842][ T8858] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.979503][ T309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.142277][ T28] audit: type=1326 audit(1776219067.378:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27830 comm="syz.2.6912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x0 [ 372.206486][ T28] audit: type=1326 audit(1776219067.408:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27832 comm="syz.6.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 372.249707][T27820] bridge1: entered promiscuous mode [ 372.295916][T27820] bridge1: entered allmulticast mode [ 372.330908][ T28] audit: type=1326 audit(1776219067.408:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27832 comm="syz.6.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 372.375756][ T28] audit: type=1326 audit(1776219067.408:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27832 comm="syz.6.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 372.458893][ T28] audit: type=1326 audit(1776219067.408:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27832 comm="syz.6.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 373.416185][T27954] loop6: detected capacity change from 0 to 128 [ 373.812224][T27997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6944'. [ 373.866004][ T8862] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.874810][T27997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6944'. [ 373.904197][ T8862] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.925535][ T8862] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.961186][ T8862] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.164833][T28031] loop8: detected capacity change from 0 to 512 [ 374.189949][T28031] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 374.236163][T28031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 374.263457][T28044] IPv4: Oversized IP packet from 127.202.26.0 [ 374.273602][T28031] System zones: 1-12 [ 374.306779][T28031] EXT4-fs (loop8): 1 truncate cleaned up [ 374.323109][T28031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.399577][T27472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.004415][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6985'. [ 375.028488][T28099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.068214][T28099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.449703][T28135] loop2: detected capacity change from 0 to 512 [ 376.468265][T28135] EXT4-fs (loop2): 1 truncate cleaned up [ 376.474450][T28135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.717983][T28156] loop6: detected capacity change from 0 to 4096 [ 376.743548][T28156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.826483][T25231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.367054][T26890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.384936][T28202] 9p: Bad value for 'rfdno' [ 377.505862][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6997'. [ 377.539357][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6997'. [ 378.129535][T28200] loop6: detected capacity change from 0 to 32768 [ 378.593082][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7035'. [ 378.615407][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.629769][T28238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.841140][T28243] loop8: detected capacity change from 0 to 4096 [ 378.868229][T28243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.262788][T27472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.376112][T28275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7040'. [ 379.409093][T28275] geneve2: entered promiscuous mode [ 379.492840][ T28] kauditd_printk_skb: 468 callbacks suppressed [ 379.492854][ T28] audit: type=1326 audit(1776219074.728:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 379.556107][ T28] audit: type=1326 audit(1776219074.728:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 379.615908][ T28] audit: type=1326 audit(1776219074.768:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 379.675991][ T28] audit: type=1326 audit(1776219074.768:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 379.726987][ T28] audit: type=1326 audit(1776219074.768:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 379.775986][ T28] audit: type=1326 audit(1776219074.768:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 379.845267][ T28] audit: type=1326 audit(1776219074.768:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 379.896237][ T28] audit: type=1326 audit(1776219074.768:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 379.995310][ T28] audit: type=1326 audit(1776219074.778:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 380.053248][ T28] audit: type=1326 audit(1776219074.778:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28288 comm="syz.2.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a3b0c819 code=0x7ffc0000 [ 380.328731][ T3387] IPVS: starting estimator thread 0... [ 380.416326][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.432657][T28352] IPVS: using max 2304 ests per chain, 115200 per kthread [ 380.439346][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.456208][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.474600][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.503625][T28361] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 380.505312][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.543979][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.580672][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.597340][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.618481][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.658395][T28363] ip_tunnel_core: Dead loop on virtual device gre3, fix it urgently! [ 380.920383][T28400] netlink: 'syz.8.7068': attribute type 1 has an invalid length. [ 381.860729][T28439] dummy0: entered allmulticast mode [ 381.869833][T28439] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7072'. [ 381.885137][T28439] batman_adv: batadv0: Interface deactivated: dummy0 [ 381.908745][T28439] dummy0 (unregistering): left allmulticast mode [ 381.915153][T28439] batman_adv: batadv0: Removing interface: dummy0 [ 381.940722][T28443] loop2: detected capacity change from 0 to 512 [ 382.021500][T28443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.094398][T28443] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.203671][T26890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.570342][T28516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7086'. [ 383.144245][T15696] IPVS: starting estimator thread 0... [ 383.265293][T28581] IPVS: using max 2112 ests per chain, 105600 per kthread [ 383.500206][T28602] loop8: detected capacity change from 0 to 512 [ 383.538869][T28602] EXT4-fs (loop8): 1 truncate cleaned up [ 383.545187][T28602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.241790][T28655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7120'. [ 384.470693][T27472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.630016][ T28] kauditd_printk_skb: 207 callbacks suppressed [ 384.630107][ T28] audit: type=1400 audit(1776219079.868:3034): avc: denied { cmd } for pid=28714 comm="syz.9.7144" path="socket:[82799]" dev="sockfs" ino=82799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 384.706814][T28722] dummy0: entered allmulticast mode [ 384.712874][T28722] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7146'. [ 384.742561][T28722] team0: Port device dummy0 removed [ 384.749241][T28722] dummy0 (unregistering): left allmulticast mode [ 384.968777][T28748] loop2: detected capacity change from 0 to 4096 [ 385.002857][T28748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.492802][T28754] loop6: detected capacity change from 0 to 4096 [ 385.689081][T28754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.766576][ T28] audit: type=1400 audit(1776219080.998:3035): avc: denied { read } for pid=28755 comm="syz.9.7162" path="socket:[82870]" dev="sockfs" ino=82870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 385.836266][T25231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.860687][T26890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.904716][T28765] dummy0: entered allmulticast mode [ 385.912793][T28765] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7166'. [ 385.925990][T28765] dummy0 (unregistering): left allmulticast mode [ 385.997661][T28771] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.004062][ T28] audit: type=1400 audit(1776219081.238:3036): avc: denied { write } for pid=28770 comm="syz.6.7167" path="socket:[82912]" dev="sockfs" ino=82912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 386.085905][T28779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7169'. [ 386.677275][ T28] audit: type=1400 audit(1776219081.908:3037): avc: denied { getopt } for pid=28843 comm="syz.9.7195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 386.684335][ T8858] nci: nci_ntf_packet: unknown ntf opcode 0x223 [ 386.884157][T28868] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28868 comm=syz.5.7200 [ 386.980104][T28883] xt_hashlimit: size too large, truncated to 1048576 [ 387.435969][ T28] audit: type=1326 audit(1776219082.678:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28966 comm="syz.5.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ea2c819 code=0x7ffc0000 [ 387.465457][T28837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.473409][ T28] audit: type=1326 audit(1776219082.678:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28966 comm="syz.5.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ea2c819 code=0x7ffc0000 [ 387.500950][ T28] audit: type=1326 audit(1776219082.678:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28966 comm="syz.5.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ea2c819 code=0x7ffc0000 [ 387.529886][ T28] audit: type=1326 audit(1776219082.678:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28966 comm="syz.5.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8b1ea2c819 code=0x7ffc0000 [ 387.554375][ T28] audit: type=1326 audit(1776219082.678:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28966 comm="syz.5.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ea2c819 code=0x7ffc0000 [ 387.562630][T28974] loop2: detected capacity change from 0 to 2048 [ 387.579614][ T28] audit: type=1326 audit(1776219082.698:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28966 comm="syz.5.7208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b1ea2c819 code=0x7ffc0000 [ 387.665993][ T3301] Alternate GPT is invalid, using primary GPT. [ 387.685543][ T3301] loop2: p1 p2 p3 [ 387.689290][ T3301] loop2: partition table partially beyond EOD, truncated [ 387.736426][T28974] Alternate GPT is invalid, using primary GPT. [ 387.742814][T28974] loop2: p1 p2 p3 [ 387.753273][T28974] loop2: partition table partially beyond EOD, truncated [ 387.904874][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 387.917878][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 387.928802][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 387.978342][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 387.987958][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 388.270650][T29052] loop2: detected capacity change from 0 to 8192 [ 388.379254][T29056] loop6: detected capacity change from 0 to 8192 [ 388.735893][T29084] loop8: detected capacity change from 0 to 512 [ 388.746639][T29084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.761674][T29084] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #15: comm syz.8.7250: corrupted inode contents [ 388.774247][T29084] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 388.774539][T29084] EXT4-fs (loop8): Remounting filesystem read-only [ 388.783691][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 388.783710][ C0] EXT4-fs (loop8): initial error at time 1776219084: ext4_do_update_inode:5602: inode 15 [ 388.783763][ C0] EXT4-fs (loop8): last error at time 1776219084: ext4_do_update_inode:5602: inode 15 [ 388.816365][T29084] EXT4-fs (loop8): 1 orphan inode deleted [ 388.822568][T29084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.912192][T27472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.998060][T29097] loop6: detected capacity change from 0 to 1024 [ 389.021346][T29097] EXT4-fs: Ignoring removed orlov option [ 389.051605][T29103] loop8: detected capacity change from 0 to 1024 [ 389.071447][T29103] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 389.071447][T29103] [ 389.164113][T29110] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7259'. [ 389.178233][T29110] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7259'. [ 389.183351][T29097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.311916][T25231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.400519][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 389.411879][ T10] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.680084][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 389.680102][ T28] audit: type=1400 audit(1776219340.915:3070): avc: denied { getopt } for pid=29139 comm="syz.6.7271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 389.738460][T29142] loop6: detected capacity change from 0 to 512 [ 389.769668][T29142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.911602][T29142] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.074278][T29156] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7277'. [ 390.084938][T25231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.150987][T29163] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.7280'. [ 390.351596][T29180] loop6: detected capacity change from 0 to 512 [ 390.359322][T29181] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7286'. [ 390.379257][T29180] EXT4-fs: test_dummy_encryption option not supported [ 390.439404][T29180] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 390.457911][ T28] audit: type=1400 audit(1776219341.685:3071): avc: denied { node_bind } for pid=29185 comm="syz.8.7290" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 390.508952][T29194] loop2: detected capacity change from 0 to 128 [ 390.637769][T29207] netlink: 'syz.2.7299': attribute type 1 has an invalid length. [ 390.729570][T29207] netlink: 'syz.2.7299': attribute type 4 has an invalid length. [ 390.745344][T29207] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7299'. [ 390.839251][T29227] loop2: detected capacity change from 0 to 512 [ 390.878434][T29227] EXT4-fs: old and new quota format mixing [ 391.154460][T29256] bridge_slave_1: left allmulticast mode [ 391.181568][T29256] bridge_slave_1: left promiscuous mode [ 391.191611][T29256] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.219952][T29256] bond0: (slave bond_slave_0): Releasing backup interface [ 391.227896][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7319'. [ 391.255724][T29256] bond0: (slave bond_slave_1): Releasing backup interface [ 391.284802][T29256] team0: Port device team_slave_0 removed [ 391.315474][T29264] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7319'. [ 391.336981][T29256] team0: Port device team_slave_1 removed [ 391.354044][T29256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.371686][T29256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.397801][T29256] net_ratelimit: 2038 callbacks suppressed [ 391.397820][T29256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 392.102387][ T28] audit: type=1400 audit(1776219343.335:3072): avc: denied { read } for pid=29292 comm="syz.2.7331" path="socket:[84616]" dev="sockfs" ino=84616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 392.651378][T29336] ref_ctr_offset mismatch. inode: 0x363 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 392.696450][ T28] audit: type=1400 audit(1776219343.935:3073): avc: denied { map } for pid=29341 comm="syz.9.7350" path="socket:[83583]" dev="sockfs" ino=83583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 392.814203][T29356] tipc: Started in network mode [ 392.819328][T29356] tipc: Node identity 022694a3de62, cluster identity 4711 [ 392.827121][T29356] tipc: Enabled bearer , priority 0 [ 392.836163][T29356] tipc: Disabling bearer [ 393.011741][T29372] loop6: detected capacity change from 0 to 128 [ 393.021784][T29372] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.034424][T29372] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 393.094782][T25231] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.145511][ T28] audit: type=1326 audit(1776219600.391:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29379 comm="syz.8.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bf63c819 code=0x7ffc0000 [ 393.170304][ T28] audit: type=1326 audit(1776219600.411:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29379 comm="syz.8.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe8bf63c819 code=0x7ffc0000 [ 393.195442][ T28] audit: type=1326 audit(1776219600.411:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29379 comm="syz.8.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bf63c819 code=0x7ffc0000 [ 393.219528][ T28] audit: type=1326 audit(1776219600.411:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29379 comm="syz.8.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bf63c819 code=0x7ffc0000 [ 393.382106][T29393] loop8: detected capacity change from 0 to 1024 [ 393.406623][T29393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.415464][T29393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.741312][ T28] audit: type=1326 audit(1776219600.981:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.9.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 393.767589][ T28] audit: type=1326 audit(1776219600.981:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29430 comm="syz.9.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 394.001123][T29442] veth1_to_bond: entered allmulticast mode [ 394.009630][T29440] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7389'. [ 394.110512][T29448] veth1_to_bond: left allmulticast mode [ 394.378946][T29460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7397'. [ 394.388520][T29460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7397'. [ 394.549247][T29476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7404'. [ 394.995145][T29504] loop8: detected capacity change from 0 to 2048 [ 395.032173][T29504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.054877][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 395.054893][ T28] audit: type=1400 audit(1776219602.291:3093): avc: denied { map } for pid=29503 comm="syz.8.7414" path="/76/file1/memory.events" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 395.115126][T27472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.163414][T29514] loop8: detected capacity change from 0 to 1024 [ 395.185723][T29514] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.213445][T29514] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 395.233676][T29514] EXT4-fs (loop8): orphan cleanup on readonly fs [ 395.251786][T29514] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.7417: Freeing blocks not in datazone - block = 0, count = 4096 [ 395.265878][T29514] loop8: lost filesystem error report for type 5 error -117 [ 395.267397][T29514] EXT4-fs (loop8): Remounting filesystem read-only [ 395.281290][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 395.281311][ C1] EXT4-fs (loop8): initial error at time 1776219602: ext4_free_blocks:6724 [ 395.281336][ C1] EXT4-fs (loop8): last error at time 1776219602: ext4_free_blocks:6724 [ 395.306102][T29514] EXT4-fs (loop8): 1 orphan inode deleted [ 395.312173][T29514] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.340344][T27472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.666116][T29536] geneve2: entered promiscuous mode [ 395.681647][T29536] geneve2: entered allmulticast mode [ 395.693370][ T8861] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 395.721300][ T8861] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 395.755322][ T28] audit: type=1326 audit(1776219602.991:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 395.767886][ T8861] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 395.810075][T29544] loop6: detected capacity change from 0 to 1024 [ 395.833345][ T28] audit: type=1326 audit(1776219602.991:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 395.836076][ T8861] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 395.865867][T29544] EXT4-fs: Ignoring removed nobh option [ 395.876660][T29544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.907298][T29544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.925300][ T28] audit: type=1326 audit(1776219603.021:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 396.023105][ T28] audit: type=1326 audit(1776219603.021:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 396.085961][ T28] audit: type=1326 audit(1776219603.031:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 396.135858][ T28] audit: type=1326 audit(1776219603.031:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 396.137258][T29557] netlink: 'syz.8.7437': attribute type 3 has an invalid length. [ 396.203156][T29557] netlink: 'syz.8.7437': attribute type 7 has an invalid length. [ 396.214504][T29557] netlink: 198340 bytes leftover after parsing attributes in process `syz.8.7437'. [ 396.216348][ T28] audit: type=1326 audit(1776219603.031:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 396.262657][ T28] audit: type=1326 audit(1776219603.041:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 396.298383][ T28] audit: type=1326 audit(1776219603.041:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29543 comm="syz.6.7433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe4cec819 code=0x7ffc0000 [ 396.406296][T25231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.453995][T29581] sctp: [Deprecated]: syz.6.7444 (pid 29581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.453995][T29581] Use struct sctp_sack_info instead [ 396.513720][T29585] bond1: (slave lo): Releasing backup interface [ 396.554138][T29585] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 396.571610][T29585] bridge_slave_0: left allmulticast mode [ 396.590949][T29593] loop2: detected capacity change from 0 to 512 [ 396.602258][T29585] bridge_slave_0: left promiscuous mode [ 396.608011][T29593] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 396.619551][T29585] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.639961][T29593] EXT4-fs (loop2): 1 truncate cleaned up [ 396.647645][T29585] bridge_slave_1: left allmulticast mode [ 396.653316][T29585] bridge_slave_1: left promiscuous mode [ 396.659530][T29593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.683428][T29585] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.706108][T29585] team0: Port device team_slave_0 removed [ 396.720956][T29585] team0: Port device team_slave_1 removed [ 396.727489][T29585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.736841][T29585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.745165][T26890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.755674][T29585] bond2: (slave gretap1): Releasing active interface [ 396.774443][T29585] bond0: (slave gre3): Releasing backup interface [ 396.781069][T29585] gre3: left promiscuous mode [ 396.992645][T29621] netlink: 'syz.9.7459': attribute type 1 has an invalid length. [ 397.023681][T29621] bond4: entered promiscuous mode [ 397.037804][T29621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 397.066155][T29621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 397.073373][T29621] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 397.086699][T29621] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 397.100600][T29621] bond4: (slave vti0): making interface the new active one [ 397.108105][T29621] vti0: entered promiscuous mode [ 397.115609][T29621] bond4: (slave vti0): Enslaving as an active interface with an up link [ 397.293336][T29641] bridge_slave_0: left allmulticast mode [ 397.318437][T29641] bridge_slave_0: left promiscuous mode [ 397.324461][T29641] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.367171][T29641] bridge_slave_1: left allmulticast mode [ 397.385380][T29641] bridge_slave_1: left promiscuous mode [ 397.392719][T29641] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.423850][T29641] bond0: (slave bond_slave_0): Releasing backup interface [ 397.457918][T29641] bond0: (slave bond_slave_1): Releasing backup interface [ 397.533081][T29641] team0: Port device team_slave_0 removed [ 397.561516][T29641] team0: Port device team_slave_1 removed [ 397.569786][T29641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.585603][T29641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.597097][T29641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.604971][T29641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.647662][T29641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.680969][T29657] batadv_slave_1: entered promiscuous mode [ 397.687095][T29658] batadv_slave_1: left promiscuous mode [ 397.814729][T29661] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.835611][T29661] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.837492][T29667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.875753][T29667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.968652][T29661] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.995913][T29661] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.055016][T29679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.079075][T29679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.099826][T29682] erspan0: entered promiscuous mode [ 398.106988][T29682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7481'. [ 398.121252][T29661] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.145343][T29661] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.181583][T29688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7484'. [ 398.199860][T29661] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.210712][T29661] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.344285][ T8865] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.353581][ T8865] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.367165][ T8863] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.375663][ T8863] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.406328][ T8863] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.421784][ T8863] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.430592][ T8863] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.463059][ T8863] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.904479][T29730] netlink: 41 bytes leftover after parsing attributes in process `syz.5.7500'. [ 398.913826][T29730] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7500'. [ 398.925765][T29730] netlink: 41 bytes leftover after parsing attributes in process `syz.5.7500'. [ 399.199998][T29748] loop8: detected capacity change from 0 to 128 [ 399.376621][T29761] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 399.383179][T29761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.391444][T29761] vhci_hcd vhci_hcd.0: Device attached [ 399.404750][T29761] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 399.411311][T29761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.431176][T29761] vhci_hcd vhci_hcd.0: Device attached [ 399.447524][T29761] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 399.454135][T29761] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 399.462203][T29761] vhci_hcd vhci_hcd.0: Device attached [ 399.468481][T29761] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 399.475076][T29761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.499353][T29761] vhci_hcd vhci_hcd.0: Device attached [ 399.506701][T29761] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(11) [ 399.513369][T29761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.521112][T29761] vhci_hcd vhci_hcd.0: Device attached [ 399.527110][T29761] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 399.536962][T29761] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 399.545692][T29761] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(17) [ 399.552298][T29761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 399.561079][T29761] vhci_hcd vhci_hcd.0: Device attached [ 399.567521][T29776] vhci_hcd: connection closed [ 399.567551][T29768] vhci_hcd: connection closed [ 399.567615][T29778] vhci_hcd: connection closed [ 399.572699][T29772] vhci_hcd: connection closed [ 399.577221][T29764] vhci_hcd: connection closed [ 399.583222][T29762] vhci_hcd: connection closed [ 399.591373][ T8856] vhci_hcd vhci_hcd.8: stop threads [ 399.602011][ T8856] vhci_hcd vhci_hcd.8: release socket [ 399.613838][ T8856] vhci_hcd vhci_hcd.8: disconnect device [ 399.619978][ T8856] vhci_hcd vhci_hcd.8: stop threads [ 399.625769][ T8856] vhci_hcd vhci_hcd.8: release socket [ 399.631160][ T8856] vhci_hcd vhci_hcd.8: disconnect device [ 399.636925][ T3478] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 399.644415][T29763] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 399.650783][ T8856] vhci_hcd vhci_hcd.8: stop threads [ 399.656659][ T8856] vhci_hcd vhci_hcd.8: release socket [ 399.662138][ T8856] vhci_hcd vhci_hcd.8: disconnect device [ 399.673884][ T8856] vhci_hcd vhci_hcd.8: stop threads [ 399.679237][ T8856] vhci_hcd vhci_hcd.8: release socket [ 399.684998][ T8856] vhci_hcd vhci_hcd.8: disconnect device [ 399.691343][ T8856] vhci_hcd vhci_hcd.8: stop threads [ 399.696677][ T8856] vhci_hcd vhci_hcd.8: release socket [ 399.702078][ T8856] vhci_hcd vhci_hcd.8: disconnect device [ 399.707760][ T8856] vhci_hcd vhci_hcd.8: stop threads [ 399.712971][ T8856] vhci_hcd vhci_hcd.8: release socket [ 399.719016][ T8856] vhci_hcd vhci_hcd.8: disconnect device [ 400.028248][T29802] netlink: 'syz.9.7525': attribute type 1 has an invalid length. [ 400.045609][T29802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.066122][T29802] netlink: 'syz.9.7525': attribute type 1 has an invalid length. [ 400.561720][T29815] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7530'. [ 400.751272][T29822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 400.916211][T29824] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7534'. [ 401.072300][T29848] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7545'. [ 401.078925][T29850] loop6: detected capacity change from 0 to 2048 [ 401.122220][T29850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.135397][T29850] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.172642][T25231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.312386][T29879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7556'. [ 401.327021][T29879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7556'. [ 401.484727][T29887] netlink: 'syz.8.7559': attribute type 4 has an invalid length. [ 401.498142][T29887] netlink: 'syz.8.7559': attribute type 4 has an invalid length. [ 401.545714][T29889] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 401.567874][T29889] batman_adv: batadv0: Adding interface: ip6gretap1 [ 401.574620][T29889] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.601289][T29889] batman_adv: batadv0: Interface activated: ip6gretap1 [ 401.994422][T29912] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7572'. [ 402.262118][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 402.262134][ T28] audit: type=1400 audit(1776219609.501:3182): avc: denied { connect } for pid=29924 comm="syz.6.7578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 402.315696][ T28] audit: type=1400 audit(1776219609.501:3183): avc: denied { bind } for pid=29924 comm="syz.6.7578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 402.385832][T29903] syz.9.7568 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 402.417384][T29903] CPU: 0 UID: 0 PID: 29903 Comm: syz.9.7568 Tainted: G W syzkaller #0 PREEMPT(full) [ 402.417422][T29903] Tainted: [W]=WARN [ 402.417430][T29903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 402.417443][T29903] Call Trace: [ 402.417450][T29903] [ 402.417459][T29903] __dump_stack+0x1d/0x30 [ 402.417490][T29903] dump_stack_lvl+0x95/0xd0 [ 402.417554][T29903] dump_stack+0x15/0x1b [ 402.417579][T29903] dump_header+0x80/0x240 [ 402.417606][T29903] oom_kill_process+0x295/0x350 [ 402.417643][T29903] out_of_memory+0x97d/0xb80 [ 402.417670][T29903] try_charge_memcg+0x62e/0xa10 [ 402.417715][T29903] obj_cgroup_charge_pages+0x23/0xc0 [ 402.417750][T29903] __memcg_kmem_charge_page+0x9e/0x170 [ 402.417854][T29903] __alloc_frozen_pages_noprof+0x18a/0x360 [ 402.417894][T29903] alloc_pages_mpol+0xb3/0x260 [ 402.417928][T29903] alloc_pages_noprof+0x8f/0x140 [ 402.418039][T29903] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 402.418079][T29903] __kvmalloc_node_noprof+0x3d4/0x650 [ 402.418113][T29903] ? futex_hash_allocate+0x190/0x9d0 [ 402.418220][T29903] ? futex_hash_allocate+0x190/0x9d0 [ 402.418255][T29903] futex_hash_allocate+0x190/0x9d0 [ 402.418335][T29903] ? cap_task_prctl+0x13f/0x6e0 [ 402.418384][T29903] futex_hash_prctl+0xd8/0xf0 [ 402.418411][T29903] __se_sys_prctl+0xa3d/0x13f0 [ 402.418440][T29903] __x64_sys_prctl+0x67/0x80 [ 402.418529][T29903] x64_sys_call+0x2533/0x3020 [ 402.418590][T29903] do_syscall_64+0x12c/0x370 [ 402.418616][T29903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.418645][T29903] RIP: 0033:0x7fd4d63ac819 [ 402.418661][T29903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.418681][T29903] RSP: 002b:00007fd4d4dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 402.418704][T29903] RAX: ffffffffffffffda RBX: 00007fd4d6625fa0 RCX: 00007fd4d63ac819 [ 402.418732][T29903] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 402.418743][T29903] RBP: 00007fd4d6442c91 R08: 0000000000000000 R09: 0000000000000000 [ 402.418758][T29903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.418773][T29903] R13: 00007fd4d6626038 R14: 00007fd4d6625fa0 R15: 00007ffe234c9058 [ 402.418794][T29903] [ 402.418884][T29903] memory: usage 283540kB, limit 307200kB, failcnt 369 [ 402.676938][T29903] memory+swap: usage 231212kB, limit 9007199254740988kB, failcnt 0 [ 402.696305][T29903] kmem: usage 205680kB, limit 9007199254740988kB, failcnt 0 [ 402.725315][T29903] Memory cgroup stats for /syz9: [ 402.725501][T29903] cache 0 [ 402.733379][T29903] rss 114688 [ 402.757278][ T28] audit: type=1400 audit(1776219610.001:3184): avc: denied { read } for pid=29936 comm="syz.2.7584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 402.773867][T29903] shmem 0 [ 402.786661][T29903] mapped_file 0 [ 402.790475][T29903] dirty 0 [ 402.793590][T29903] writeback 0 [ 402.798001][T29903] workingset_refault_anon 1947 [ 402.804127][T29903] workingset_refault_file 2176 [ 402.805408][ T28] audit: type=1400 audit(1776219610.031:3185): avc: denied { ioctl } for pid=29935 comm="syz.5.7583" path="socket:[85902]" dev="sockfs" ino=85902 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 402.810307][T29903] swap 1523712 [ 402.838722][T29903] swapcached 14659584 [ 402.842744][T29903] pgpgin 672869 [ 402.844229][T29941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7584'. [ 402.846510][T29903] pgpgout 672840 [ 402.893384][T29903] pgfault 373153 [ 402.897327][T29903] pgmajfault 271 [ 402.900990][T29903] inactive_anon 32768 [ 402.905575][T29903] active_anon 86016 [ 402.909431][T29903] inactive_file 0 [ 402.913101][T29903] active_file 0 [ 402.918328][T29903] unevictable 0 [ 402.921904][T29945] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7587'. [ 402.935366][T29903] hierarchical_memory_limit 314572800 [ 402.940815][T29903] hierarchical_memsw_limit 9223372036854771712 [ 402.946780][T29947] netlink: 'syz.5.7588': attribute type 4 has an invalid length. [ 402.947767][T29903] total_cache 0 [ 402.958282][T29903] total_rss 114688 [ 402.962010][T29903] total_shmem 0 [ 402.965519][T29903] total_mapped_file 0 [ 402.967340][T29947] netlink: 'syz.5.7588': attribute type 4 has an invalid length. [ 402.969547][T29903] total_dirty 0 [ 402.981420][T29903] total_writeback 0 [ 402.990436][T29903] total_workingset_refault_anon 1947 [ 402.996566][T29903] total_workingset_refault_file 2176 [ 403.015049][T29903] total_swap 1523712 [ 403.023041][T29903] total_swapcached 14659584 [ 403.027891][T29903] total_pgpgin 672869 [ 403.031916][T29903] total_pgpgout 672840 [ 403.036845][T29903] total_pgfault 373153 [ 403.041458][T29903] total_pgmajfault 271 [ 403.041754][T29951] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7590'. [ 403.046033][T29903] total_inactive_anon 32768 [ 403.059442][T29903] total_active_anon 86016 [ 403.061060][T29951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7590'. [ 403.073269][T29951] netlink: 'syz.5.7590': attribute type 2 has an invalid length. [ 403.081833][T29951] netlink: 'syz.5.7590': attribute type 3 has an invalid length. [ 403.089606][T29903] total_inactive_file 0 [ 403.089619][T29903] total_active_file 0 [ 403.089627][T29903] total_unevictable 0 [ 403.089636][T29903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.7568,pid=29902,uid=0 [ 403.145041][T29903] Memory cgroup out of memory: Killed process 29903 (syz.9.7568) total-vm:96080kB, anon-rss:1340kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 403.385259][ T28] audit: type=1326 audit(1776219610.611:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.9.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 403.447185][ T28] audit: type=1326 audit(1776219610.611:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.9.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 403.481681][T29976] loop2: detected capacity change from 0 to 128 [ 403.516947][T29978] syzkaller1: entered promiscuous mode [ 403.525944][ T28] audit: type=1326 audit(1776219610.611:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.9.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 403.575358][T29978] syzkaller1: entered allmulticast mode [ 403.581072][ T28] audit: type=1326 audit(1776219610.611:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.9.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 403.612714][ T28] audit: type=1326 audit(1776219610.611:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.9.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 403.653661][ T28] audit: type=1326 audit(1776219610.611:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.9.7600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 403.685851][T29976] support for cryptoloop has been removed. Use dm-crypt instead. [ 404.094201][ T3387] kernel write not supported for file bpf-prog (pid: 3387 comm: kworker/0:3) [ 404.131978][ T8859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.250304][ T8859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.380177][ T8859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.516927][ T8859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.675517][ T3478] usb 17-1: enqueue for inactive port 0 [ 404.685956][ T3478] usb 17-1: enqueue for inactive port 0 [ 404.755407][ T3478] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 404.916884][ T8859] bond0 (unregistering): Released all slaves [ 404.977691][ T8859] hsr_slave_0: left promiscuous mode [ 404.983531][ T8859] hsr_slave_1: left promiscuous mode [ 404.997514][ T8859] veth1_macvtap: left promiscuous mode [ 405.009293][ T8859] veth0_macvtap: left promiscuous mode [ 405.015993][ T8859] veth1_vlan: left promiscuous mode [ 405.023077][ T8859] veth0_vlan: left promiscuous mode [ 405.266520][T30024] chnl_net:caif_netlink_parms(): no params data found [ 405.321854][T30024] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.329153][T30024] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.336594][T30024] bridge_slave_0: entered allmulticast mode [ 405.343208][T30024] bridge_slave_0: entered promiscuous mode [ 405.350635][T30024] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.358091][T30024] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.367086][T30024] bridge_slave_1: entered allmulticast mode [ 405.379021][T30024] bridge_slave_1: entered promiscuous mode [ 405.408978][T30024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.433694][ T8859] IPVS: stop unused estimator thread 0... [ 405.439439][T30024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.491482][T30024] team0: Port device team_slave_0 added [ 405.499092][T30092] loop8: detected capacity change from 0 to 1024 [ 405.499577][T30024] team0: Port device team_slave_1 added [ 405.526425][T30092] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 405.528034][T30024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.556708][T30024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.582708][T30024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.590309][T30092] EXT4-fs (loop8): mount failed [ 405.599093][T30024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.606186][T30024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.632383][T30024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.678904][T30024] hsr_slave_0: entered promiscuous mode [ 405.684977][T30024] hsr_slave_1: entered promiscuous mode [ 405.707681][T30092] __nla_validate_parse: 2 callbacks suppressed [ 405.707698][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7631'. [ 405.731662][T30024] debugfs: 'hsr0' already exists in 'hsr' [ 405.738544][T30024] Cannot create hsr debugfs directory [ 406.044684][T30145] netlink: 996 bytes leftover after parsing attributes in process `syz.8.7637'. [ 406.165867][T30024] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.176673][T30024] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.188926][T30024] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.224411][T30024] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.270463][T30024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.284154][T30024] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.293743][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.300862][ T8873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.312339][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.319423][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.430044][T30024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.576418][T30226] loop6: detected capacity change from 0 to 128 [ 406.603977][T30024] veth0_vlan: entered promiscuous mode [ 406.615113][T30226] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.639000][T30024] veth1_vlan: entered promiscuous mode [ 406.647040][T30226] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 406.698494][T30024] veth0_macvtap: entered promiscuous mode [ 406.725019][T30024] veth1_macvtap: entered promiscuous mode [ 406.746974][T25231] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.759806][T30024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.790978][T30240] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7644'. [ 406.803808][T30024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.844256][ T8868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.870200][T30249] tipc: Failed to remove unknown binding: 66,1,1/2126:48770848/48770850 [ 406.874254][ T8868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.909916][T30253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7648'. [ 406.939826][ T8863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.955202][ T8863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.974508][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7648'. [ 407.430553][T30300] loop8: detected capacity change from 0 to 1764 [ 407.467710][T30300] iso9660: Unknown parameter 'nojoock' [ 407.504785][T30310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7661'. [ 407.653034][T30327] loop8: detected capacity change from 0 to 512 [ 407.775342][T30338] netlink: 'syz.6.7668': attribute type 1 has an invalid length. [ 407.826232][T30338] bond1: entered promiscuous mode [ 407.831589][T30338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.851584][T30338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7668'. [ 407.861415][T30338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7668'. [ 407.927063][T30338] bond1: (slave bridge2): making interface the new active one [ 407.952089][T30359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.961144][T30338] bridge2: entered promiscuous mode [ 407.976164][T30359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.986902][T30338] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 408.010929][T30364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7674'. [ 408.214341][T30370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7675'. [ 408.381337][T30388] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 408.387929][T30388] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 408.436375][T30388] vhci_hcd vhci_hcd.0: Device attached [ 408.459039][T30397] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 408.465761][T30397] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.488364][T30397] vhci_hcd vhci_hcd.0: Device attached [ 408.502755][T30388] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(5) [ 408.509398][T30388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.540485][T30388] vhci_hcd vhci_hcd.0: Device attached [ 408.555114][T30397] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 408.561820][T30397] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.575191][T30397] vhci_hcd vhci_hcd.0: Device attached [ 408.582821][T30388] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(9) [ 408.589350][T30388] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 408.599992][T30388] vhci_hcd vhci_hcd.0: Device attached [ 408.614555][T30388] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(13) [ 408.621232][T30388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.637937][T30388] vhci_hcd vhci_hcd.0: Device attached [ 408.640528][T30414] loop8: detected capacity change from 0 to 1024 [ 408.652435][T30388] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(15) [ 408.659095][T30388] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 408.678523][T30388] vhci_hcd vhci_hcd.0: Device attached [ 408.685753][ T3478] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 408.704428][T30414] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 408.715793][T30388] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(17) [ 408.722402][T30388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.738063][T30388] vhci_hcd vhci_hcd.0: Device attached [ 408.748321][T30429] vhci_hcd: connection closed [ 408.748459][T30425] vhci_hcd: connection closed [ 408.753199][T30421] vhci_hcd: connection closed [ 408.755744][T30433] vhci_hcd: connection closed [ 408.759896][T30409] vhci_hcd: connection closed [ 408.762673][ T8873] vhci_hcd vhci_hcd.6: stop threads [ 408.767505][T30418] vhci_hcd: connection closed [ 408.777885][T30402] vhci_hcd: connection closed [ 408.782779][T30389] vhci_hcd: connection reset by peer [ 408.786006][ T8873] vhci_hcd vhci_hcd.6: release socket [ 408.816147][ T8873] vhci_hcd vhci_hcd.6: disconnect device [ 408.818075][T30414] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #3: block 1: comm syz.8.7683: lblock 1 mapped to illegal pblock 1 (length 1) [ 408.822091][ T8873] vhci_hcd vhci_hcd.6: stop threads [ 408.841391][ T8873] vhci_hcd vhci_hcd.6: release socket [ 408.847437][ T8873] vhci_hcd vhci_hcd.6: disconnect device [ 408.861468][ T8873] vhci_hcd vhci_hcd.6: stop threads [ 408.866920][ T8873] vhci_hcd vhci_hcd.6: release socket [ 408.874041][ T8873] vhci_hcd vhci_hcd.6: disconnect device [ 408.882438][T30414] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 408.882557][T30414] __quota_error: 45 callbacks suppressed [ 408.882570][T30414] Quota error (device loop8): write_blk: dquota write failed [ 408.883689][ T8873] vhci_hcd vhci_hcd.6: stop threads [ 408.891636][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 408.897463][ T8873] vhci_hcd vhci_hcd.6: release socket [ 408.904621][ C0] EXT4-fs (loop8): initial error at time 1776219616: ext4_map_blocks:828 [ 408.910700][ T8873] vhci_hcd vhci_hcd.6: disconnect device [ 408.916229][ C0] : inode 3: block 1 [ 408.916246][ C0] EXT4-fs (loop8): last error at time 1776219616: ext4_map_blocks:828: inode 3: block 1 [ 408.951744][T30414] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 408.963804][ T8873] vhci_hcd vhci_hcd.6: stop threads [ 408.969836][ T8873] vhci_hcd vhci_hcd.6: release socket [ 408.975537][ T8873] vhci_hcd vhci_hcd.6: disconnect device [ 408.981286][T30414] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.7683: Failed to acquire dquot type 0 [ 408.993092][ T8873] vhci_hcd vhci_hcd.6: stop threads [ 408.999172][ T8873] vhci_hcd vhci_hcd.6: release socket [ 409.004681][T30414] loop8: lost filesystem error report for type 5 error -117 [ 409.004767][ T8873] vhci_hcd vhci_hcd.6: disconnect device [ 409.018415][T30414] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.7683: Freeing blocks not in datazone - block = 0, count = 4096 [ 409.032631][T30414] loop8: lost filesystem error report for type 5 error -117 [ 409.033009][T30414] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.7683: Invalid inode bitmap blk 0 in block_group 0 [ 409.050664][ T8865] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 409.053539][ T8873] vhci_hcd vhci_hcd.6: stop threads [ 409.073429][T30414] loop8: lost filesystem error report for type 5 error -117 [ 409.073561][T30414] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 409.076836][ T8865] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 409.095909][ T8873] vhci_hcd vhci_hcd.6: release socket [ 409.110640][T30414] loop8: lost filesystem error report for type 5 error -117 [ 409.110778][ T8865] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 409.110787][T30414] EXT4-fs (loop8): 1 orphan inode deleted [ 409.111191][T30414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.128000][ T8865] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:42: Failed to release dquot type 0 [ 409.145345][ T8873] vhci_hcd vhci_hcd.6: disconnect device [ 409.172285][ T8873] vhci_hcd vhci_hcd.6: stop threads [ 409.177695][ T8873] vhci_hcd vhci_hcd.6: release socket [ 409.183167][ T8873] vhci_hcd vhci_hcd.6: disconnect device [ 409.193118][T30414] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.263387][T30459] loop5: detected capacity change from 0 to 7 [ 409.361509][ T28] audit: type=1400 audit(1776219616.601:3236): avc: denied { setopt } for pid=30468 comm="syz.5.7692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 409.436526][T30476] loop0: detected capacity change from 0 to 256 [ 409.455094][T30476] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 409.492874][T30476] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.497382][T30480] loop6: detected capacity change from 0 to 128 [ 409.512936][T30480] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 409.526016][T30480] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.552940][T30480] ext2 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.564915][ T28] audit: type=1400 audit(1776219616.791:3237): avc: denied { getopt } for pid=30485 comm="syz.0.7698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.605132][T30488] geneve1: entered promiscuous mode [ 409.610807][T30488] macsec1: entered promiscuous mode [ 409.617040][T30488] macsec1: entered allmulticast mode [ 409.622452][T30488] geneve1: entered allmulticast mode [ 409.630466][T25231] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.967857][T30546] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 410.250321][T30566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.684136][T30612] loop6: detected capacity change from 0 to 256 [ 410.758603][T30612] FAT-fs (loop6): Directory bread(block 64) failed [ 410.792536][T30612] FAT-fs (loop6): Directory bread(block 65) failed [ 410.815932][T30612] FAT-fs (loop6): Directory bread(block 66) failed [ 410.833048][T30612] FAT-fs (loop6): Directory bread(block 67) failed [ 410.854118][T30612] FAT-fs (loop6): Directory bread(block 68) failed [ 410.870003][T30612] FAT-fs (loop6): Directory bread(block 69) failed [ 410.896199][T30612] FAT-fs (loop6): Directory bread(block 70) failed [ 410.903135][T30612] FAT-fs (loop6): Directory bread(block 71) failed [ 410.913540][T30612] FAT-fs (loop6): Directory bread(block 72) failed [ 410.943663][T30612] FAT-fs (loop6): Directory bread(block 73) failed [ 411.084918][ T28] audit: type=1400 audit(1776219618.321:3238): avc: denied { read } for pid=30624 comm="syz.0.7721" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 411.148842][ T28] audit: type=1400 audit(1776219618.321:3239): avc: denied { open } for pid=30624 comm="syz.0.7721" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 411.203161][ T28] audit: type=1400 audit(1776219618.351:3240): avc: denied { ioctl } for pid=30624 comm="syz.0.7721" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 411.286464][T30637] loop8: detected capacity change from 0 to 512 [ 411.313905][T30637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.327325][T30637] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.548713][T27472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.580951][ T28] audit: type=1326 audit(1776219618.821:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30651 comm="syz.9.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 411.608123][ T28] audit: type=1326 audit(1776219618.821:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30651 comm="syz.9.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d63ac819 code=0x7ffc0000 [ 411.753814][T30658] syzkaller0: entered promiscuous mode [ 411.761602][T30658] syzkaller0: entered allmulticast mode [ 411.944476][T30675] __nla_validate_parse: 3 callbacks suppressed [ 411.944493][T30675] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7740'. [ 412.078740][T30685] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7745'. [ 412.210189][ T3304] ================================================================== [ 412.218316][ T3304] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 412.222517][T30697] loop6: detected capacity change from 0 to 512 [ 412.225378][ T3304] [ 412.225388][ T3304] write to 0xffff888105accf7c of 4 bytes by task 3301 on cpu 1: [ 412.225404][ T3304] shmem_mknod+0x143/0x170 [ 412.225424][ T3304] shmem_create+0x34/0x50 [ 412.225451][ T3304] path_openat+0xd75/0x2050 [ 412.225465][ T3304] do_file_open+0x16c/0x290 [ 412.259904][ T3304] do_sys_openat2+0x94/0x130 [ 412.264515][ T3304] __x64_sys_openat+0xf2/0x120 [ 412.269365][ T3304] x64_sys_call+0x1e39/0x3020 [ 412.274045][ T3304] do_syscall_64+0x12c/0x370 [ 412.278626][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.284523][ T3304] [ 412.286834][ T3304] read to 0xffff888105accf7c of 4 bytes by task 3304 on cpu 0: [ 412.294374][ T3304] fill_mg_cmtime+0x5b/0x270 [ 412.298985][ T3304] generic_fillattr+0x24a/0x340 [ 412.303832][ T3304] shmem_getattr+0x181/0x200 [ 412.308507][ T3304] vfs_getattr_nosec+0x146/0x1e0 [ 412.313446][ T3304] vfs_getattr+0x48/0x60 [ 412.317679][ T3304] vfs_statx_path+0x28/0x140 [ 412.322263][ T3304] vfs_statx+0xc4/0x170 [ 412.326410][ T3304] vfs_fstatat+0x118/0x170 [ 412.330901][ T3304] __se_sys_newfstatat+0x55/0x3e0 [ 412.335923][ T3304] __x64_sys_newfstatat+0x55/0x70 [ 412.340938][ T3304] x64_sys_call+0x2c64/0x3020 [ 412.345608][ T3304] do_syscall_64+0x12c/0x370 [ 412.350187][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.356077][ T3304] [ 412.358392][ T3304] value changed: 0x1b36255e -> 0x1b3d5d51 [ 412.364112][ T3304] [ 412.366508][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 412.372648][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 412.383053][ T3304] Tainted: [W]=WARN [ 412.386842][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 412.396884][ T3304] ================================================================== [ 412.462907][T30697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.486305][T30697] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.534030][T25231] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 412.547375][T25231] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 412.862992][T29987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.028525][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.039054][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.108404][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.118774][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.168191][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.178608][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.217710][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.228088][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 413.456753][ T70] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 413.464865][ T70] bridge2 (unregistering): left promiscuous mode [ 413.516808][ T70] bond0 (unregistering): Released all slaves [ 413.526786][ T70] bond1 (unregistering): Released all slaves [ 413.550548][ T70] tipc: Left network mode [ 413.558651][ T70] hsr_slave_0: left promiscuous mode [ 413.564865][ T70] hsr_slave_1: left promiscuous mode [ 413.572402][ T70] veth1_macvtap: left promiscuous mode [ 413.578146][ T70] veth0_macvtap: left promiscuous mode [ 413.583831][ T70] veth1_vlan: left promiscuous mode [ 413.590036][ T70] veth0_vlan: left promiscuous mode [ 413.785293][ T3478] vhci_hcd vhci_hcd.6: vhci_device speed not set