last executing test programs: 5m45.247655098s ago: executing program 32 (id=282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m53.102683149s ago: executing program 33 (id=1282): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 4m50.182669247s ago: executing program 34 (id=1392): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000300)={0xffbfff40, 0x400040a, 0xffffffde, 0x2, 0x9, "007ffc00", 0x7, 0x40403}) 4m36.471671608s ago: executing program 35 (id=1715): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 3m31.214345773s ago: executing program 36 (id=3187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x440088c4) 2m36.383116836s ago: executing program 37 (id=4185): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0xff}, 0x204, 0x0, 0x43a1bd78, 0x4, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) open_by_handle_at(0xffffffffffffffff, 0x0, 0xc27af54b865dc9bf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64], 0x18}}, 0x2080) 2m27.594054465s ago: executing program 38 (id=4480): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000400000009", @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) 2m15.473762691s ago: executing program 39 (id=4781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 1m58.891954772s ago: executing program 40 (id=5208): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1m27.223786534s ago: executing program 5 (id=5986): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x82, &(0x7f0000000100)=@assoc_value={r3, 0x7fff}, 0x8) 1m27.044458114s ago: executing program 5 (id=5993): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) 1m26.83062657s ago: executing program 7 (id=6004): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000980)="06005f0100089000000000850800ba1328d6717ba9956b6b41f99abd85eae36c1756", 0x22, 0x24000001, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m26.734676506s ago: executing program 7 (id=6006): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x28, 0x67, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "c1c30bab373ff7fe08fc1ad23027bbc9855fb351"}}}}}, 0x3e) 1m26.665609917s ago: executing program 7 (id=6009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m26.609034547s ago: executing program 7 (id=6011): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x48) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) getdents(r0, 0x0, 0x0) 1m26.463919871s ago: executing program 5 (id=6018): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 1m26.162925741s ago: executing program 5 (id=6022): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1m26.161648251s ago: executing program 7 (id=6023): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 1m26.10725279s ago: executing program 5 (id=6024): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) sendfile(r3, r2, 0x0, 0x4) 1m25.706739608s ago: executing program 7 (id=6034): setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100003f01000800034000000002"], 0x1a50}}, 0x8000) 1m25.706526978s ago: executing program 41 (id=6034): setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100003f01000800034000000002"], 0x1a50}}, 0x8000) 1m25.271918601s ago: executing program 5 (id=6046): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m25.227666448s ago: executing program 42 (id=6046): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m12.896223578s ago: executing program 9 (id=6270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 1m12.846319666s ago: executing program 9 (id=6273): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x31) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1m12.83031703s ago: executing program 9 (id=6274): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 1m12.728660766s ago: executing program 9 (id=6285): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) r1 = open(&(0x7f0000000000)='.\x00', 0x181000, 0x0) getdents(r1, 0x0, 0x0) 1m12.129556386s ago: executing program 9 (id=6286): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m11.184794935s ago: executing program 9 (id=6299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="38000000010001", 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) 1m11.140829752s ago: executing program 43 (id=6299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="38000000010001", 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) 57.343969718s ago: executing program 4 (id=6695): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r1) 57.063709554s ago: executing program 4 (id=6704): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00005ec000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x22002f7}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x16, 0x8, 0x9, 0xa, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x4, {0x6, 0x2b, 0xb, 0x8, 0x0, 0xa, 0x0, @in=@multicast1, @in=@multicast1}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x1136, 0x4) io_uring_enter(r0, 0x731d, 0x7721, 0x16, 0x0, 0x0) 56.974406549s ago: executing program 4 (id=6706): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 56.058885562s ago: executing program 4 (id=6728): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$cgroup_devices(r0, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 55.914125577s ago: executing program 4 (id=6730): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000100)="bf", 0x1, 0x4fed3) r1 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) write$UHID_CREATE2(r1, 0x0, 0x118) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) write$binfmt_format(r2, &(0x7f0000000000)='1\x00', 0x2400) 55.639900232s ago: executing program 4 (id=6736): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) 55.630194064s ago: executing program 44 (id=6736): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) 22.590204165s ago: executing program 1 (id=7473): setresuid(0x0, 0xee01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000002600)="98df", 0x2}], 0x2, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22.508588629s ago: executing program 1 (id=7474): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001880)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x4810) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) close(r1) 22.38457748s ago: executing program 1 (id=7476): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22.288539446s ago: executing program 1 (id=7478): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000976000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ebe000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22.145247889s ago: executing program 1 (id=7483): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) open_tree(0xffffffffffffffff, 0x0, 0x1001) 21.930741356s ago: executing program 1 (id=7492): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f00001b4000/0x2000)=nil, 0x2000, 0x3000005) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 21.90468924s ago: executing program 45 (id=7492): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f00001b4000/0x2000)=nil, 0x2000, 0x3000005) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 4.91099569s ago: executing program 6 (id=7784): socket$kcm(0x11, 0x200000000000003, 0x300) socket$kcm(0x2, 0x5, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000100)=r2, 0x4) 4.271020727s ago: executing program 8 (id=7804): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@usrquota}, {@stripe={'stripe', 0x3d, 0xe}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 4.110088764s ago: executing program 8 (id=7807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 1.109517035s ago: executing program 6 (id=7813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x1, 0x3, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x11, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0xc}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.030530188s ago: executing program 8 (id=7816): fsopen(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x0, 0x6, 0x6, 0x3, 0x2}, {0x3, 0x2, 0x7, 0x4, 0x0, 0x6}, 0x90000000, 0x82b8ca3e, 0x1d24}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b4e7c312ffd1ff5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.030205238s ago: executing program 3 (id=7817): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x2}, [], {0x4, 0x2}}, 0x24, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) 1.006998072s ago: executing program 6 (id=7818): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 924.963016ms ago: executing program 8 (id=7819): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 924.100526ms ago: executing program 6 (id=7829): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x9}, 0x2002, 0x20000032, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x700, 0x7, 0x97be, 0x7e02, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @local}}}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 857.344217ms ago: executing program 8 (id=7822): timer_create(0x2, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x5ca4, 0x1c080, 0xa, 0x48}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 836.450191ms ago: executing program 6 (id=7824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mlockall(0x1) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001800010000000000000000000100000a140000000b0a01"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 772.582321ms ago: executing program 8 (id=7826): io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) io_setup(0x3, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_destroy(r1) 514.837124ms ago: executing program 0 (id=7830): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x550, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x106200, 0x10004, 0x2, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 489.211239ms ago: executing program 0 (id=7831): io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 459.050004ms ago: executing program 0 (id=7832): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000240)) 398.858004ms ago: executing program 0 (id=7833): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) 365.130379ms ago: executing program 3 (id=7835): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x172831) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 310.901238ms ago: executing program 0 (id=7836): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 269.953285ms ago: executing program 2 (id=7837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x5, 0xfffffbff) 211.416205ms ago: executing program 2 (id=7838): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 193.149499ms ago: executing program 3 (id=7839): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 192.699378ms ago: executing program 2 (id=7840): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 174.550182ms ago: executing program 2 (id=7841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x41}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0x3b, 0x9, 0x8}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x3ff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000084) 134.046298ms ago: executing program 2 (id=7842): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2011) 105.654043ms ago: executing program 3 (id=7843): io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 105.067633ms ago: executing program 2 (id=7853): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 49.292742ms ago: executing program 0 (id=7844): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, @perf_bp={0x0, 0x8}, 0x8011, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 48.800162ms ago: executing program 3 (id=7845): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) capset(&(0x7f0000002ffa)={0x20071026, 0xffffffffffffffff}, 0x0) 37.543694ms ago: executing program 6 (id=7846): socket$kcm(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x1}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3 (id=7847): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) kernel console output (not intermixed with test programs): ould solve the problem. [ 298.542088][T20561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.573399][T20561] hsr_slave_0: entered promiscuous mode [ 298.579524][T20561] hsr_slave_1: entered promiscuous mode [ 298.585439][T20561] debugfs: 'hsr0' already exists in 'hsr' [ 298.591236][T20561] Cannot create hsr debugfs directory [ 298.638058][T20523] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.649811][T20523] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.662558][T20523] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.675957][T20523] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.714133][T20561] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.724534][T20561] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.757842][T20523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.776550][T20561] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.791079][T20561] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.803526][T20523] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.813064][T16187] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.820224][T16187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.838166][T20523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.850864][T20523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.863534][T16187] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.870642][T16187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.893721][T20561] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.904243][T20561] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.947087][T20523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.962932][T20561] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.973434][T20561] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.030679][T20561] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 299.040026][T20561] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 299.050154][T20561] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 299.059166][T20561] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 299.121580][T20523] veth0_vlan: entered promiscuous mode [ 299.135830][T20523] veth1_vlan: entered promiscuous mode [ 299.153362][T20561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.168055][T20561] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.178405][T20523] veth0_macvtap: entered promiscuous mode [ 299.189272][T16187] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.196398][T16187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.209835][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.217003][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.225096][T20523] veth1_macvtap: entered promiscuous mode [ 299.244447][T20523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.256855][T20523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.272338][T16172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.284543][T16172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.298537][T16172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.307670][T16172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.398355][T20561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.481999][T20717] loop6: detected capacity change from 0 to 128 [ 299.551670][T20738] netlink: 'syz.9.6069': attribute type 32 has an invalid length. [ 299.565689][T20738] netlink: 140 bytes leftover after parsing attributes in process `syz.9.6069'. [ 299.803399][T20561] veth0_vlan: entered promiscuous mode [ 299.810623][T20750] netlink: 'syz.3.6078': attribute type 1 has an invalid length. [ 299.818357][T20750] netlink: 'syz.3.6078': attribute type 4 has an invalid length. [ 299.882811][T20561] veth1_vlan: entered promiscuous mode [ 299.907792][T20561] veth0_macvtap: entered promiscuous mode [ 299.913819][T20750] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6078'. [ 299.939187][T20561] veth1_macvtap: entered promiscuous mode [ 300.042275][T20561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.055689][T20561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.069341][T16172] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.078187][T16172] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.148897][T16172] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.167905][T16172] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.380215][T20767] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6048'. [ 300.521623][T20771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6094'. [ 300.613869][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 300.613886][ T28] audit: type=1400 audit(1777186890.064:2221): avc: denied { watch watch_reads } for pid=20782 comm="syz.9.6086" path="/proc/1309/task" dev="proc" ino=57928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 300.659642][T20786] netlink: 'syz.6.6087': attribute type 10 has an invalid length. [ 300.686261][T20786] team0: Device xfrm0 is of different type [ 300.727052][T20788] syzkaller0: entered allmulticast mode [ 300.739026][T20788] syzkaller0: entered promiscuous mode [ 300.760003][T20788] syzkaller0 (unregistering): left allmulticast mode [ 300.766726][T20788] syzkaller0 (unregistering): left promiscuous mode [ 300.832058][ T28] audit: type=1400 audit(1777186890.284:2222): avc: denied { read } for pid=8381 comm="kworker/1:10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57961 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 300.898422][T20779] loop8: detected capacity change from 0 to 32768 [ 300.948673][T14877] loop8: p1 p3 < > [ 300.965557][T20779] loop8: p1 p3 < > [ 301.050499][T20817] netlink: 'syz.8.6104': attribute type 34 has an invalid length. [ 301.096693][T16091] udevd[16091]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 301.108048][T14877] udevd[14877]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 301.130071][T16091] udevd[16091]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 301.141321][T14877] udevd[14877]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 301.471668][T20841] dummy0: entered promiscuous mode [ 301.496313][T20841] dummy0: left promiscuous mode [ 301.652234][T20857] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 301.668523][ T28] audit: type=1400 audit(1777186891.114:2223): avc: denied { execute } for pid=20861 comm="syz.9.6123" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=58508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 301.756110][ T28] audit: type=1400 audit(1777186891.204:2224): avc: denied { read } for pid=20870 comm="syz.6.6127" path="socket:[58512]" dev="sockfs" ino=58512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 301.961314][T20892] loop8: detected capacity change from 0 to 1024 [ 301.995467][T20892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.195863][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.292297][T20914] loop8: detected capacity change from 0 to 764 [ 302.411988][ T28] audit: type=1400 audit(1777186891.864:2225): avc: denied { setcurrent } for pid=20925 comm="syz.8.6151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 302.433899][ T28] audit: type=1401 audit(1777186891.884:2226): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 302.709914][ T28] audit: type=1326 audit(1777186892.154:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20945 comm="syz.8.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 302.784803][ T28] audit: type=1326 audit(1777186892.154:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20945 comm="syz.8.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 302.823111][T20955] loop8: detected capacity change from 0 to 128 [ 302.840658][ T28] audit: type=1326 audit(1777186892.154:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20945 comm="syz.8.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 302.842585][T20953] loop6: detected capacity change from 0 to 512 [ 302.886408][T20955] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.908942][ T28] audit: type=1326 audit(1777186892.154:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20945 comm="syz.8.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 302.920624][T20953] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 302.938621][T20955] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.959262][T20953] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.6162: iget: bogus i_mode (2) [ 303.025364][T20953] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 303.028503][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 303.044082][ C0] EXT4-fs (loop6): initial error at time 1777186892: ext4_orphan_get:1397: inode 15 [ 303.053723][ C0] EXT4-fs (loop6): last error at time 1777186892: ext4_orphan_get:1397: inode 15 [ 303.067745][T20953] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6162: couldn't read orphan inode 15 (err -117) [ 303.137062][T20953] loop6: lost filesystem error report for type 5 error -117 [ 303.138538][T20561] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.221168][T20953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.408030][T20975] loop8: detected capacity change from 0 to 128 [ 303.489122][T20523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.819162][T20994] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6178'. [ 303.932486][T20998] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 304.106925][T20998] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6179'. [ 304.417571][T21020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6188'. [ 304.431247][T21022] loop9: detected capacity change from 0 to 512 [ 304.439616][T21022] ext4: Unknown parameter 'smackfstransmute' [ 304.580247][T21031] loop9: detected capacity change from 0 to 1024 [ 304.596476][T21031] EXT4-fs: Ignoring removed nobh option [ 304.604628][T21031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.633140][T21031] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.705017][T12259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.013145][T21054] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6200'. [ 305.024892][T21054] geneve2: entered promiscuous mode [ 305.208406][T21072] loop6: detected capacity change from 0 to 2048 [ 305.234719][T21072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.247142][T21066] loop9: detected capacity change from 0 to 512 [ 305.287934][T21066] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 305.323565][T21070] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 305.340218][T21070] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 305.341077][T21066] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.6206: iget: bogus i_mode (2) [ 305.366253][T21070] EXT4-fs (loop6): This should not happen!! Data will be lost [ 305.366253][T21070] [ 305.377033][T21070] EXT4-fs (loop6): Total free blocks count 0 [ 305.383471][T21066] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 305.384861][T21066] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.6206: couldn't read orphan inode 15 (err -117) [ 305.395280][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 305.395409][ C1] EXT4-fs (loop9): initial error at time 1777186894: ext4_orphan_get:1397: inode 15 [ 305.395472][ C1] EXT4-fs (loop9): last error at time 1777186894: ext4_orphan_get:1397: inode 15 [ 305.398558][T21070] EXT4-fs (loop6): Free/Dirty block details [ 305.408696][T21066] loop9: lost filesystem error report for type 5 error -117 [ 305.414074][T21070] EXT4-fs (loop6): free_blocks=4096 [ 305.414091][T21070] EXT4-fs (loop6): dirty_blocks=512 [ 305.414147][T21070] EXT4-fs (loop6): Block reservation details [ 305.414159][T21070] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 305.489218][ T42] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 496 with error 28 [ 305.519171][T20523] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 305.537734][T21066] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.714535][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 305.714549][ T28] audit: type=1326 audit(1777186895.164:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 305.822096][T12259] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.838042][ T28] audit: type=1326 audit(1777186895.164:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 305.862354][ T28] audit: type=1326 audit(1777186895.164:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 305.889016][ T28] audit: type=1326 audit(1777186895.164:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 305.922643][ T28] audit: type=1326 audit(1777186895.184:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 305.946923][ T28] audit: type=1326 audit(1777186895.194:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 306.057185][ T28] audit: type=1326 audit(1777186895.194:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 306.120469][ T28] audit: type=1326 audit(1777186895.194:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21101 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26dbf7d04e code=0x7ffc0000 [ 306.161905][ T28] audit: type=1326 audit(1777186895.254:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 306.283869][ T28] audit: type=1326 audit(1777186895.264:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 307.113161][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6226'. [ 307.435007][T21151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6238'. [ 307.448956][T21151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6238'. [ 307.768075][T21166] xt_hashlimit: size too large, truncated to 1048576 [ 308.345767][T21197] netlink: 'syz.9.6256': attribute type 4 has an invalid length. [ 309.100810][T21218] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6264'. [ 309.460972][T21241] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 309.555270][T21248] loop9: detected capacity change from 0 to 512 [ 309.603489][T21248] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.6285: inode has both inline data and extents flags [ 309.609817][T21251] loop8: detected capacity change from 0 to 512 [ 309.623964][T21248] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.624314][T21248] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.6285: couldn't read orphan inode 15 (err -117) [ 309.633576][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 309.633596][ C1] EXT4-fs (loop9): initial error at time 1777187155: ext4_orphan_get:1397: inode 15 [ 309.633645][ C1] EXT4-fs (loop9): last error at time 1777187155: ext4_orphan_get:1397: inode 15 [ 309.692636][T21251] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 309.735814][T21251] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.6275: iget: bogus i_mode (2) [ 309.748457][T21251] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.758573][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 309.768529][T21248] loop9: lost filesystem error report for type 5 error -117 [ 309.775253][ C0] EXT4-fs (loop8): initial error at time 1777187155: ext4_orphan_get:1397 [ 309.780274][T21248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.782944][ C0] : inode 15 [ 309.808013][ C0] EXT4-fs (loop8): last error at time 1777187155: ext4_orphan_get:1397: inode 15 [ 309.818736][T21251] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.6275: couldn't read orphan inode 15 (err -117) [ 309.831401][T21251] loop8: lost filesystem error report for type 5 error -117 [ 309.843539][T21251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.945920][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6280'. [ 309.972226][T21248] loop9: detected capacity change from 512 to 64 [ 309.981634][T21272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6280'. [ 309.981904][T21276] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.9.6285: error -12 reading directory block [ 310.001980][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6280'. [ 310.059863][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.068555][T21272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6280'. [ 310.129061][T12259] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 310.159664][T21288] netlink: 'syz.0.6284': attribute type 4 has an invalid length. [ 310.307817][T21308] loop8: detected capacity change from 0 to 512 [ 310.366831][T21308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.384084][T21308] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #15: comm syz.8.6290: corrupted inode contents [ 310.422510][T21320] loop6: detected capacity change from 0 to 2048 [ 310.428986][T21308] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.430142][T21308] EXT4-fs (loop8): Remounting filesystem read-only [ 310.439402][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 310.439415][ C1] EXT4-fs (loop8): initial error at time 1777187155: ext4_do_update_inode:5602: inode 15 [ 310.439431][ C1] EXT4-fs (loop8): last error at time 1777187155: ext4_do_update_inode:5602: inode 15 [ 310.511699][T21320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.538567][T21308] EXT4-fs (loop8): 1 orphan inode deleted [ 310.554949][T21308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.631953][T20523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.699612][T21341] loop6: detected capacity change from 0 to 512 [ 310.701335][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.835516][T16629] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.981540][T21350] bio_check_eod: 51 callbacks suppressed [ 310.981598][T21350] syz.6.6295: attempt to access beyond end of device [ 310.981598][T21350] loop6: rw=0, sector=432, nr_sectors = 128 limit=512 [ 311.149073][ T28] kauditd_printk_skb: 755 callbacks suppressed [ 311.149163][ T28] audit: type=1326 audit(1777187156.608:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.195688][ T28] audit: type=1326 audit(1777187156.608:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.231916][ T28] audit: type=1326 audit(1777187156.608:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.264069][T16181] kworker/u8:30: attempt to access beyond end of device [ 311.264069][T16181] loop6: rw=1, sector=560, nr_sectors = 3800 limit=512 [ 311.265950][ T28] audit: type=1326 audit(1777187156.608:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.305331][T16181] kworker/u8:30: attempt to access beyond end of device [ 311.305331][T16181] loop6: rw=1, sector=4360, nr_sectors = 2048 limit=512 [ 311.308881][ T28] audit: type=1326 audit(1777187156.688:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.350936][ T28] audit: type=1326 audit(1777187156.688:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.371711][T16181] kworker/u8:30: attempt to access beyond end of device [ 311.371711][T16181] loop6: rw=1, sector=6408, nr_sectors = 2056 limit=512 [ 311.472010][ T28] audit: type=1326 audit(1777187156.738:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.547981][ T28] audit: type=1326 audit(1777187156.738:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.584492][T16181] kworker/u8:30: attempt to access beyond end of device [ 311.584492][T16181] loop6: rw=1, sector=8464, nr_sectors = 2048 limit=512 [ 311.605061][T21374] chnl_net:caif_netlink_parms(): no params data found [ 311.635820][T16181] kworker/u8:30: attempt to access beyond end of device [ 311.635820][T16181] loop6: rw=1, sector=10512, nr_sectors = 2048 limit=512 [ 311.661327][T16181] kworker/u8:30: attempt to access beyond end of device [ 311.661327][T16181] loop6: rw=1, sector=12560, nr_sectors = 2048 limit=512 [ 311.668963][ T28] audit: type=1326 audit(1777187156.738:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21373 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e8058d04e code=0x7ffc0000 [ 311.678463][T16181] kworker/u8:30: attempt to access beyond end of device [ 311.678463][T16181] loop6: rw=1, sector=14608, nr_sectors = 1856 limit=512 [ 311.818765][ T28] audit: type=1326 audit(1777187156.738:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 311.872410][T21374] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.908568][T21374] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.926080][T21374] bridge_slave_0: entered allmulticast mode [ 311.933379][T21374] bridge_slave_0: entered promiscuous mode [ 311.940471][T21374] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.947589][T21374] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.955185][T21374] bridge_slave_1: entered allmulticast mode [ 311.969350][T21374] bridge_slave_1: entered promiscuous mode [ 312.020501][T21374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.043708][T21374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.097136][T21374] team0: Port device team_slave_0 added [ 312.114964][T21374] team0: Port device team_slave_1 added [ 312.154643][T21374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.175382][T21374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.216942][T21374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.239938][T21374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.247136][T21374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.285823][T21374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.349994][T21374] hsr_slave_0: entered promiscuous mode [ 312.378428][T21374] hsr_slave_1: entered promiscuous mode [ 312.395594][T21374] debugfs: 'hsr0' already exists in 'hsr' [ 312.402648][T21374] Cannot create hsr debugfs directory [ 313.013400][T21463] loop2: detected capacity change from 0 to 7 [ 313.110800][T21374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.120070][T21374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.140934][T21374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.156500][T21374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.228804][T21374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.253413][T21374] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.274576][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.281843][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.298988][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.306087][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.375341][T21521] loop6: detected capacity change from 0 to 1024 [ 313.424641][T21521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 313.466451][T21521] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.512088][T21374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.559109][T21521] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 3: comm syz.6.6340: lblock 3 mapped to illegal pblock 3 (length 3) [ 313.599488][T21521] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 313.624827][T21521] EXT4-fs (loop6): This should not happen!! Data will be lost [ 313.624827][T21521] [ 313.714219][ T70] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 3) [ 313.737968][ T70] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 313.741967][T21374] veth0_vlan: entered promiscuous mode [ 313.759194][ T70] EXT4-fs (loop6): This should not happen!! Data will be lost [ 313.759194][ T70] [ 313.771245][ T70] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: block 4: comm kworker/u8:4: lblock 4 mapped to illegal pblock 4 (length 2) [ 313.783619][T21374] veth1_vlan: entered promiscuous mode [ 313.797617][ T70] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 313.811272][ T70] EXT4-fs (loop6): This should not happen!! Data will be lost [ 313.811272][ T70] [ 313.822874][T21374] veth0_macvtap: entered promiscuous mode [ 313.831088][T20523] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 313.844044][T21374] veth1_macvtap: entered promiscuous mode [ 313.844743][T20523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 313.873549][T21374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.897850][T21374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.939745][ T5216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.958124][ T5216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.992535][ T5216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.022860][ T5216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.053352][T21616] tipc: Failed to remove unknown binding: 66,1,1/0:1666851424/1666851426 [ 314.064914][T21616] tipc: Failed to remove unknown binding: 66,1,1/0:1666851424/1666851426 [ 314.234554][T21642] netlink: 'syz.0.6358': attribute type 2 has an invalid length. [ 314.696522][T21713] loop6: detected capacity change from 0 to 256 [ 314.792877][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.822355][T21713] FAT-fs (loop6): Filesystem has been set read-only [ 314.832992][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.848773][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.872880][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.906676][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.921574][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.935151][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.958076][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 314.985373][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 315.007435][T21713] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 315.791806][T21840] syzkaller0: entered allmulticast mode [ 315.897683][T21850] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6419'. [ 315.945291][T21854] loop4: detected capacity change from 0 to 512 [ 316.038639][ T3681] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 316.044792][ T4406] Bluetooth: hci0: command 0x1003 tx timeout [ 316.090525][T21863] syz.4.6422: attempt to access beyond end of device [ 316.090525][T21863] loop4: rw=0, sector=432, nr_sectors = 128 limit=512 [ 316.198037][T16181] kworker/u8:30: attempt to access beyond end of device [ 316.198037][T16181] loop4: rw=1, sector=560, nr_sectors = 3968 limit=512 [ 316.259707][T16181] kworker/u8:30: attempt to access beyond end of device [ 316.259707][T16181] loop4: rw=1, sector=4528, nr_sectors = 2064 limit=512 [ 316.286550][T16181] kworker/u8:30: attempt to access beyond end of device [ 316.286550][T16181] loop4: rw=1, sector=6592, nr_sectors = 2064 limit=512 [ 316.319325][T16181] kworker/u8:30: attempt to access beyond end of device [ 316.319325][T16181] loop4: rw=1, sector=8656, nr_sectors = 2064 limit=512 [ 316.359331][T16181] kworker/u8:30: attempt to access beyond end of device [ 316.359331][T16181] loop4: rw=1, sector=10720, nr_sectors = 2168 limit=512 [ 316.391594][T16181] kworker/u8:30: attempt to access beyond end of device [ 316.391594][T16181] loop4: rw=1, sector=12888, nr_sectors = 2048 limit=512 [ 316.411381][T16181] kworker/u8:30: attempt to access beyond end of device [ 316.411381][T16181] loop4: rw=1, sector=14936, nr_sectors = 1528 limit=512 [ 316.769114][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 316.769132][ T28] audit: type=1400 audit(1777187162.228:3194): avc: denied { map } for pid=21917 comm="syz.8.6446" path="socket:[61289]" dev="sockfs" ino=61289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 316.794500][T21916] delete_channel: no stack [ 316.813906][ T28] audit: type=1400 audit(1777187162.228:3195): avc: denied { write } for pid=21916 comm="syz.6.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 316.906512][T21926] netlink: 'syz.8.6449': attribute type 1 has an invalid length. [ 317.222662][T21926] bond1: entered promiscuous mode [ 317.227987][T21926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.266382][T21931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.274216][T21931] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 317.284908][T21931] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 317.297284][T21931] bond1: (slave ip6gre1): making interface the new active one [ 317.305122][T21931] ip6gre1: entered promiscuous mode [ 317.312766][T21931] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 317.518407][T21950] netlink: 'syz.4.6457': attribute type 39 has an invalid length. [ 317.569354][T21954] loop6: detected capacity change from 0 to 512 [ 317.656332][T21954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.677436][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6462'. [ 317.689174][T21963] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6462'. [ 317.731667][T21954] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.751391][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6462'. [ 317.760424][T16172] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.779958][T16172] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.790937][T21963] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6462'. [ 317.825805][T16172] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.826412][T20523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.844329][T16172] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.177570][ T28] audit: type=1326 audit(1777187163.628:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeb3cc819 code=0x7ffc0000 [ 318.203885][ T28] audit: type=1326 audit(1777187163.628:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeb3cc819 code=0x7ffc0000 [ 318.228195][ T28] audit: type=1326 audit(1777187163.628:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f9aeb3cc819 code=0x7ffc0000 [ 318.252154][ T28] audit: type=1326 audit(1777187163.628:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeb3cc819 code=0x7ffc0000 [ 318.275963][ T28] audit: type=1326 audit(1777187163.628:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9aeb3cc819 code=0x7ffc0000 [ 318.299768][ T28] audit: type=1326 audit(1777187163.628:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeb3cc819 code=0x7ffc0000 [ 318.323788][ T28] audit: type=1326 audit(1777187163.628:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.4.6483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aeb3cc819 code=0x7ffc0000 [ 318.402656][T22029] netlink: 'syz.6.6490': attribute type 21 has an invalid length. [ 319.147679][T22079] loop4: detected capacity change from 0 to 2048 [ 319.168677][T22079] EXT4-fs (loop4): unsupported descriptor size 0 [ 319.210235][T22086] random: crng reseeded on system resumption [ 319.216287][ T28] audit: type=1400 audit(1777187164.668:3203): avc: denied { write } for pid=22085 comm="syz.8.6512" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 319.289466][ T8377] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 319.298416][ T8377] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.329479][T22090] fido_id[22090]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 319.345824][T22092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6513'. [ 319.790770][T22159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.800511][T22159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.831771][T22164] loop6: detected capacity change from 0 to 1024 [ 319.863841][T22164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.876741][T22164] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.907918][T20523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 319.967266][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6532'. [ 319.979624][T22182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6532'. [ 319.996425][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6532'. [ 320.008547][T22182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6532'. [ 320.261186][ T5229] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.294127][ T5229] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.316268][ T5229] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.333756][ T5229] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.438851][T22265] loop4: detected capacity change from 0 to 256 [ 320.683032][T22293] ref_ctr_offset mismatch. inode: 0x27e offset: 0x0 ref_ctr_offset(old): 0x14 ref_ctr_offset(new): 0x0 [ 320.903386][T22303] tipc: Enabling of bearer rejected, failed to enable media [ 321.325034][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811baf7600: rx timeout, send abort [ 321.343611][T22322] syzkaller1: entered promiscuous mode [ 321.349445][T22322] syzkaller1: entered allmulticast mode [ 321.420542][T22328] geneve2: entered promiscuous mode [ 321.489598][T22343] sch_tbf: burst 1402 is lower than device syzkaller0 mtu (1514) ! [ 321.631782][T22364] netlink: 'syz.0.6592': attribute type 29 has an invalid length. [ 321.656373][T22364] netlink: 'syz.0.6592': attribute type 29 has an invalid length. [ 321.667118][T22364] __nla_validate_parse: 4 callbacks suppressed [ 321.667131][T22364] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6592'. [ 321.825047][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881761e8200: rx timeout, send abort [ 321.833349][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811baf7600: abort rx timeout. Force session deactivation [ 322.053243][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6607'. [ 322.062750][T22400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.083269][T22400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.207005][T22394] loop4: detected capacity change from 0 to 32768 [ 322.271182][T14877] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 322.276492][T14877] loop4: p1 start 460800 is beyond EOD, truncated [ 322.283536][T14877] loop4: p2 size 83886080 extends beyond EOD, truncated [ 322.305507][T14877] loop4: p5 start 460800 is beyond EOD, truncated [ 322.319032][T14877] loop4: p6 size 83886080 extends beyond EOD, truncated [ 322.333322][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881761e8200: abort rx timeout. Force session deactivation [ 322.346185][T22394] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 322.355056][T22394] loop4: p1 start 460800 is beyond EOD, truncated [ 322.362015][T22394] loop4: p2 size 83886080 extends beyond EOD, truncated [ 322.364486][T22413] loop6: detected capacity change from 0 to 512 [ 322.380041][T22413] EXT4-fs: old and new quota format mixing [ 322.388186][T22394] loop4: p5 start 460800 is beyond EOD, truncated [ 322.398164][T22394] loop4: p6 size 83886080 extends beyond EOD, truncated [ 322.573530][T14880] udevd[14880]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 322.574533][T14877] udevd[14877]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 322.594015][T14879] udevd[14879]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 322.594126][T16091] udevd[16091]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 322.733172][T22430] loop4: detected capacity change from 0 to 512 [ 322.758433][T22430] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6620: inode has both inline data and extents flags [ 322.783030][T22430] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 322.783178][T22430] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6620: couldn't read orphan inode 15 (err -117) [ 322.792377][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 322.792395][ C1] EXT4-fs (loop4): initial error at time 1777187424: ext4_orphan_get:1397: inode 15 [ 322.792432][ C1] EXT4-fs (loop4): last error at time 1777187424: ext4_orphan_get:1397: inode 15 [ 322.841717][T22430] loop4: lost filesystem error report for type 5 error -117 [ 322.842243][T22430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.993767][T21374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.189360][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 323.189408][ T28] audit: type=1326 audit(1777187424.635:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 323.264697][ T28] audit: type=1326 audit(1777187424.645:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 323.349967][ T28] audit: type=1326 audit(1777187424.645:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 323.403570][ T28] audit: type=1326 audit(1777187424.645:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 323.434897][ T28] audit: type=1326 audit(1777187424.645:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 323.503208][T22473] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6638'. [ 323.540830][ T28] audit: type=1326 audit(1777187424.725:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e8058d04e code=0x7ffc0000 [ 323.567410][ T28] audit: type=1326 audit(1777187424.725:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e8058d04e code=0x7ffc0000 [ 323.633075][ T28] audit: type=1326 audit(1777187424.725:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e8058d04e code=0x7ffc0000 [ 323.657426][ T28] audit: type=1326 audit(1777187424.735:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 323.681520][ T28] audit: type=1326 audit(1777187424.735:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22451 comm="syz.8.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e805cc819 code=0x7ffc0000 [ 323.888736][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6657'. [ 323.945337][ T23] IPVS: starting estimator thread 0... [ 324.048585][T22524] IPVS: using max 2400 ests per chain, 120000 per kthread [ 324.080196][T22540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6666'. [ 324.119926][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6669'. [ 324.133192][T22545] loop6: detected capacity change from 0 to 1024 [ 324.158970][T22545] EXT4-fs: Ignoring removed bh option [ 324.179322][T22545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.214217][T20523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.346921][T22574] loop8: detected capacity change from 0 to 1024 [ 324.361886][T22577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22577 comm=syz.3.6681 [ 324.392636][T22581] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.406741][T22574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.418101][T22581] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.419556][T22574] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.455261][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 324.486460][T22581] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.500690][T22581] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.546335][T22589] loop8: detected capacity change from 0 to 1024 [ 324.554654][T22589] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.562392][T22581] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.574837][T22581] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.602476][T22589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.636431][T22589] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.6686: missing EA_INODE flag [ 324.665034][T22581] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.679785][T22581] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.699582][T22589] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.6686: error while reading EA inode 11 err=-117 [ 324.735863][ T322] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.746782][ T322] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.761896][ T322] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.778566][ T322] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.788824][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.802226][ T322] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.818661][ T322] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.830246][ T322] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.839803][ T322] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.357475][T22640] netlink: 'syz.3.6703': attribute type 10 has an invalid length. [ 325.936179][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6719'. [ 325.965451][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6719'. [ 326.141050][T22688] veth1_to_bond: entered allmulticast mode [ 326.199161][T22694] loop4: detected capacity change from 0 to 1024 [ 326.218787][T22694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 326.261997][T22700] veth1_to_bond: left allmulticast mode [ 326.278691][T22694] loop4: detected capacity change from 1024 to 64 [ 326.288004][T22694] syz.4.6728: attempt to access beyond end of device [ 326.288004][T22694] loop4: rw=2049, sector=256, nr_sectors = 2 limit=64 [ 326.307125][T22694] EXT4-fs warning (device loop4): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 128) [ 326.337031][T22694] Buffer I/O error on device loop4, logical block 128 [ 326.481232][T22709] netdevsim netdevsim8: Firmware load for './file0/../file0' refused, path contains '..' component [ 326.577582][T21374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 326.587773][T22695] kmmpd-loop4: attempt to access beyond end of device [ 326.587773][T22695] loop4: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 326.612400][T22695] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 326.792422][T22715] chnl_net:caif_netlink_parms(): no params data found [ 326.833418][T22715] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.840670][T22715] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.847903][T22715] bridge_slave_0: entered allmulticast mode [ 326.854519][T22715] bridge_slave_0: entered promiscuous mode [ 326.861271][T22715] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.868418][T22715] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.875727][T22715] bridge_slave_1: entered allmulticast mode [ 326.882363][T22715] bridge_slave_1: entered promiscuous mode [ 326.900301][T22715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.911318][T22715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.931072][T22715] team0: Port device team_slave_0 added [ 326.937599][T22715] team0: Port device team_slave_1 added [ 326.953435][T22715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.960466][T22715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.986484][T22715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.999004][T22715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.007716][T22715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.044755][T22715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.074436][T22740] bridge1: entered promiscuous mode [ 327.080623][T22740] bridge1: entered allmulticast mode [ 327.122266][T22715] hsr_slave_0: entered promiscuous mode [ 327.138004][T22715] hsr_slave_1: entered promiscuous mode [ 327.144327][T22715] debugfs: 'hsr0' already exists in 'hsr' [ 327.150631][T22715] Cannot create hsr debugfs directory [ 327.280694][T22757] loop6: detected capacity change from 0 to 512 [ 327.298866][T22757] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 327.316122][T22757] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 327.339436][T22757] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 327.349445][T22757] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 327.357592][T22757] System zones: 0-2, 18-18, 34-35 [ 327.370331][T22757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.398310][T20523] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.457425][T22774] loop6: detected capacity change from 0 to 1024 [ 327.470364][T22715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.496014][T22715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.504782][T22774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.518087][T22715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.528985][T22774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.548790][T22785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6752'. [ 327.596361][T22715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 327.625204][T22794] loop8: detected capacity change from 0 to 1024 [ 327.669690][T22794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.679540][T22715] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.689286][T22715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.696638][T22715] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.702147][T22794] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.703721][T22715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.728809][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.746303][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.838745][T22715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.870888][T22715] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.917488][T16181] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.924694][T16181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.956411][T16181] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.964036][T16181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.057078][T22846] netlink: 'syz.3.6764': attribute type 4 has an invalid length. [ 328.086651][T22846] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6764'. [ 328.191979][T22715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.281487][T22870] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.460692][T22715] veth0_vlan: entered promiscuous mode [ 328.505049][T22715] veth1_vlan: entered promiscuous mode [ 328.555383][T22715] veth0_macvtap: entered promiscuous mode [ 328.616811][T22715] veth1_macvtap: entered promiscuous mode [ 328.659613][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6777'. [ 328.678369][T22715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.679001][T22917] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6778'. [ 328.699008][T22917] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6778'. [ 328.715346][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 328.715361][ T28] audit: type=1400 audit(1777187430.165:3248): avc: denied { watch watch_reads } for pid=22919 comm="syz.8.6779" path="/" dev="ramfs" ino=64958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 328.788223][T22929] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 328.828395][T22715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.858639][T16181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.887936][T16181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.935301][T16181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.972909][T16181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.044671][ T28] audit: type=1326 audit(1777187430.495:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.081905][T22952] bridge_slave_0: left allmulticast mode [ 329.087622][T22952] bridge_slave_0: left promiscuous mode [ 329.098173][T22952] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.102730][ T28] audit: type=1326 audit(1777187430.495:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.132620][T22952] bridge_slave_1: left allmulticast mode [ 329.138685][T22952] bridge_slave_1: left promiscuous mode [ 329.144752][T22952] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.171862][ T28] audit: type=1326 audit(1777187430.525:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.198134][ T28] audit: type=1326 audit(1777187430.525:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.223211][T22952] bond0: (slave bond_slave_0): Releasing backup interface [ 329.224713][ T28] audit: type=1326 audit(1777187430.525:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.262133][T22952] bond0: (slave bond_slave_1): Releasing backup interface [ 329.274518][ T28] audit: type=1326 audit(1777187430.525:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.300753][ T28] audit: type=1326 audit(1777187430.525:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.328678][T22952] team0: Port device team_slave_0 removed [ 329.343030][ T28] audit: type=1326 audit(1777187430.525:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.354080][T22952] team0: Port device team_slave_1 removed [ 329.367630][ T28] audit: type=1326 audit(1777187430.525:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22965 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 329.374791][T22952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.406656][T22952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.416742][T22952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.432286][T22952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.441819][T22952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.467663][T22979] gretap2: entered promiscuous mode [ 329.813946][T23034] loop1: detected capacity change from 0 to 512 [ 329.826419][T23034] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 329.841203][T23034] EXT4-fs (loop1): 1 truncate cleaned up [ 329.849342][T23034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.019141][T22715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.376801][T23108] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6829'. [ 331.672069][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6862'. [ 331.890197][T23220] bridge5: entered promiscuous mode [ 331.896333][T23220] bridge5: entered allmulticast mode [ 332.154607][T23243] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6874'. [ 332.193740][T23243] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6874'. [ 332.639332][T23283] loop8: detected capacity change from 0 to 8192 [ 332.811053][T20561] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 332.838600][T20561] FAT-fs (loop8): Filesystem has been set read-only [ 333.190770][ T322] Bluetooth: hci0: Frame reassembly failed (-84) [ 333.276335][T23327] loop1: detected capacity change from 0 to 512 [ 333.299211][T23327] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 333.328815][T23327] EXT4-fs (loop1): orphan cleanup on readonly fs [ 333.335190][T23327] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6910: Invalid inode bitmap blk 4 in block_group 0 [ 333.368895][T23327] loop1: lost filesystem error report for type 5 error -117 [ 333.369471][T23327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.403859][T22715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.668747][T23343] bridge1: entered promiscuous mode [ 333.674499][T23343] bridge1: entered allmulticast mode [ 333.957425][T23352] loop1: detected capacity change from 0 to 1024 [ 333.981071][T23352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.016815][T22715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.386328][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6936'. [ 334.416435][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6936'. [ 334.532045][T23411] bridge0: port 3(vlan2) entered blocking state [ 334.538445][T23411] bridge0: port 3(vlan2) entered disabled state [ 334.545484][T23411] vlan2: entered allmulticast mode [ 334.551409][T23411] geneve0: entered allmulticast mode [ 334.557953][T23411] vlan2: entered promiscuous mode [ 334.574075][T23411] geneve0: entered promiscuous mode [ 334.603100][T23417] xt_hashlimit: size too large, truncated to 1048576 [ 334.712676][ T5229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.823363][ T5229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.930918][ T5229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.016938][ T5229] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.184233][ T5229] bridge_slave_1: left allmulticast mode [ 335.193415][ T5229] bridge_slave_1: left promiscuous mode [ 335.202015][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.218318][ T5229] bridge_slave_0: left allmulticast mode [ 335.228957][ T3681] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 335.235284][ T4406] Bluetooth: hci0: command 0x1003 tx timeout [ 335.241622][T23317] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 335.264435][ T5229] bridge_slave_0: left promiscuous mode [ 335.278664][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.421316][ T5229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.439891][ T5229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.479729][ T5229] bond0 (unregistering): Released all slaves [ 335.556561][ T5229] hsr_slave_0: left promiscuous mode [ 335.562606][ T5229] hsr_slave_1: left promiscuous mode [ 335.575183][ T5229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.600482][ T5229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.616978][T23464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6957'. [ 335.638905][ T5229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.646453][ T5229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.676309][ T5229] veth1_macvtap: left promiscuous mode [ 335.692048][ T5229] veth0_macvtap: left promiscuous mode [ 335.697651][ T5229] veth1_vlan: left promiscuous mode [ 335.706403][T23476] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6957'. [ 335.748637][ T5229] veth0_vlan: left promiscuous mode [ 335.805517][T23483] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 335.897827][T23487] SELinux: failed to load policy [ 335.991646][ T5229] team0 (unregistering): Port device team_slave_1 removed [ 336.010330][ T5229] team0 (unregistering): Port device team_slave_0 removed [ 336.284312][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 336.284329][ T28] audit: type=1400 audit(1777187437.735:3345): avc: denied { listen } for pid=23502 comm="syz.8.6970" lport=50023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 336.388622][T23507] loop8: detected capacity change from 0 to 2048 [ 336.410135][T14877] Alternate GPT is invalid, using primary GPT. [ 336.416653][T14877] loop8: p1 p2 p3 [ 336.451165][T14877] loop8: partition table partially beyond EOD, truncated [ 336.470284][T23507] Alternate GPT is invalid, using primary GPT. [ 336.482786][T23507] loop8: p1 p2 p3 [ 336.486614][T23507] loop8: partition table partially beyond EOD, truncated [ 336.630190][T23534] loop8: detected capacity change from 0 to 128 [ 336.657619][T14877] udevd[14877]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 336.657753][T14879] udevd[14879]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 336.679259][T16091] udevd[16091]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 337.218560][ T28] audit: type=1326 audit(1777187438.665:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.251191][ T28] audit: type=1326 audit(1777187438.665:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.318586][ T28] audit: type=1326 audit(1777187438.665:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.378549][ T28] audit: type=1326 audit(1777187438.665:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.439727][ T28] audit: type=1326 audit(1777187438.665:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.463883][ T28] audit: type=1326 audit(1777187438.665:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.487775][ T28] audit: type=1326 audit(1777187438.665:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.520897][T23597] loop1: detected capacity change from 0 to 512 [ 337.598536][ T28] audit: type=1326 audit(1777187438.665:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.626258][T23602] xt_hashlimit: size too large, truncated to 1048576 [ 337.658824][T23597] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #11: comm syz.1.6992: unexpected EA_INODE flag [ 337.699294][ T28] audit: type=1326 audit(1777187438.665:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23588 comm="syz.3.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 337.723861][T23597] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 337.727023][T23597] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6992: couldn't read orphan inode 11 (err -117) [ 337.736332][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 337.736352][ C1] EXT4-fs (loop1): initial error at time 1777187439: ext4_orphan_get:1397: inode 11 [ 337.736383][ C1] EXT4-fs (loop1): last error at time 1777187439: ext4_orphan_get:1397: inode 11 [ 337.858573][T23597] loop1: lost filesystem error report for type 5 error -117 [ 337.860525][T23597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.922632][T23597] openvswitch: netlink: Key type 1542 is out of range max 32 [ 337.971376][T22715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.124811][T23634] loop1: detected capacity change from 0 to 512 [ 338.170619][T23634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.210075][T23634] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.7009: iget: bad i_size value: 38620345925642 [ 338.288572][T23634] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 338.298512][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 338.302139][T23634] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7009: couldn't read orphan inode 15 (err -117) [ 338.307727][ C1] EXT4-fs (loop1): initial error at time 1777187439: ext4_orphan_get:1397: inode 15 [ 338.335745][ C1] EXT4-fs (loop1): last error at time 1777187439: ext4_orphan_get:1397: inode 15 [ 338.355177][T23634] loop1: lost filesystem error report for type 5 error -117 [ 338.355813][T23634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.479883][T22715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.483896][T23663] netlink: 'syz.0.7019': attribute type 5 has an invalid length. [ 338.496793][T23663] netlink: 45 bytes leftover after parsing attributes in process `syz.0.7019'. [ 338.632978][T23682] loop8: detected capacity change from 0 to 1024 [ 338.703267][T23682] EXT4-fs: Ignoring removed bh option [ 338.772425][T23682] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.857058][T23687] netlink: 88 bytes leftover after parsing attributes in process `syz.6.7028'. [ 338.893947][T23682] EXT4-fs (loop8): shut down requested (2) [ 339.064063][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.327339][T23738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7047'. [ 339.666254][T23780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.197739][T23831] loop1: detected capacity change from 0 to 1024 [ 340.216125][T23831] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 340.226859][T23831] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 340.238753][T23831] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 340.249622][T23831] EXT4-fs error (device loop1): ext4_get_journal_inode:5888: inode #5: comm syz.1.7083: unexpected bad inode w/o EXT4_IGET_BAD [ 340.263969][T23831] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 340.264115][T23831] EXT4-fs (loop1): no journal found [ 340.274151][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 340.274176][ C0] EXT4-fs (loop1): initial error at time 1777187441: ext4_get_journal_inode:5888: inode 5 [ 340.274209][ C0] EXT4-fs (loop1): last error at time 1777187441: ext4_get_journal_inode:5888: inode 5 [ 340.305878][T23831] EXT4-fs (loop1): can't get journal size [ 340.317166][T23831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.331955][T23831] EXT4-fs error (device loop1): __ext4_remount:6829: comm syz.1.7083: Abort forced by user [ 340.342533][T23831] EXT4-fs (loop1): Remounting filesystem read-only [ 340.349982][T23831] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 340.359612][T23831] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 340.375235][T22715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.777004][T23854] loop1: detected capacity change from 0 to 256 [ 340.842966][T23856] sctp: [Deprecated]: syz.1.7094 (pid 23856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.842966][T23856] Use struct sctp_sack_info instead [ 341.228595][ T3681] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 341.432796][T23882] loop8: detected capacity change from 0 to 1024 [ 341.459023][T23882] EXT4-fs: inline encryption not supported [ 341.493538][T23882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 341.513921][T23882] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.528328][T23882] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: comm syz.8.7105: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.543870][T23882] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: comm syz.8.7105: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.569071][T23882] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 341.600791][T23882] EXT4-fs (loop8): This should not happen!! Data will be lost [ 341.600791][T23882] [ 341.650252][T20561] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 341.662107][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 341.828270][T23902] syzkaller0: entered allmulticast mode [ 341.842248][T23902] syzkaller0 (unregistering): left allmulticast mode [ 341.867376][T23904] SELinux: failed to load policy [ 342.691983][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7131'. [ 342.841396][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 342.841413][ T28] audit: type=1326 audit(1777187444.295:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 342.883523][ T28] audit: type=1326 audit(1777187444.295:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 342.916395][ T28] audit: type=1326 audit(1777187444.295:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 342.941756][ T28] audit: type=1326 audit(1777187444.295:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 342.966036][ T28] audit: type=1326 audit(1777187444.295:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 342.991266][ T28] audit: type=1326 audit(1777187444.295:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 343.015508][ T28] audit: type=1326 audit(1777187444.295:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 343.039535][ T28] audit: type=1326 audit(1777187444.295:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 343.075623][ T28] audit: type=1326 audit(1777187444.295:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 343.100449][ T28] audit: type=1326 audit(1777187444.295:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23964 comm="syz.3.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 343.192995][T23973] netlink: 88 bytes leftover after parsing attributes in process `syz.8.7139'. [ 344.019562][T24032] SELinux: failed to load policy [ 344.078131][T24042] loop8: detected capacity change from 0 to 128 [ 344.101722][T24042] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.128755][T24042] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.279024][T20561] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.320246][T24113] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 345.517143][T24122] loop2: detected capacity change from 0 to 7 [ 345.799693][T24141] xt_hashlimit: size too large, truncated to 1048576 [ 346.012728][T24158] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.033340][T24158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.040631][T24158] IPv6: NLM_F_CREATE should be set when creating new route [ 346.051098][T24158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.058381][T24158] IPv6: NLM_F_CREATE should be set when creating new route [ 346.069368][T24162] team0: Port device dummy0 removed [ 346.075167][T24162] batman_adv: batadv0: Adding interface: dummy0 [ 346.083015][T24162] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.118542][T24162] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 346.219708][T24177] netlink: 'syz.1.7221': attribute type 1 has an invalid length. [ 346.227663][T24177] netlink: 'syz.1.7221': attribute type 4 has an invalid length. [ 346.235738][T24177] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7221'. [ 347.055325][T24232] hsr0: entered promiscuous mode [ 347.091369][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7237'. [ 347.133542][T24232] hsr_slave_0: left promiscuous mode [ 347.155115][T24232] hsr_slave_1: left promiscuous mode [ 347.316073][T24256] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 347.757699][T24277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7249'. [ 347.816913][T24279] loop8: detected capacity change from 0 to 4096 [ 347.939604][T24279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.001231][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.095861][ T28] kauditd_printk_skb: 460 callbacks suppressed [ 348.095879][ T28] audit: type=1400 audit(1777187449.535:3846): avc: denied { shutdown } for pid=24290 comm="syz.0.7253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.182765][T16172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.322337][T16172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.393379][T16172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.452851][T16172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.567252][T16172] vlan2: left allmulticast mode [ 348.574527][T16172] geneve0: left allmulticast mode [ 348.581257][T16172] vlan2: left promiscuous mode [ 348.586021][T16172] geneve0: left promiscuous mode [ 348.591933][T16172] bridge0: port 3(vlan2) entered disabled state [ 348.612388][T16172] bridge_slave_1: left allmulticast mode [ 348.622948][T16172] bridge_slave_1: left promiscuous mode [ 348.632018][T16172] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.658780][T16172] bridge_slave_0: left allmulticast mode [ 348.664483][T16172] bridge_slave_0: left promiscuous mode [ 348.670762][T16172] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.820724][T16172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.970174][T16172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.996464][T16172] bond0 (unregistering): Released all slaves [ 349.092872][T24300] chnl_net:caif_netlink_parms(): no params data found [ 349.337059][T16172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.354391][T16172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.438987][T16172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.467309][T16172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.482100][T16172] veth1_macvtap: left promiscuous mode [ 349.497200][T16172] veth0_macvtap: left promiscuous mode [ 349.514871][T16172] veth1_vlan: left promiscuous mode [ 349.530168][T16172] veth0_vlan: left promiscuous mode [ 349.683427][T16172] team0 (unregistering): Port device team_slave_1 removed [ 349.705386][T16172] team0 (unregistering): Port device team_slave_0 removed [ 349.872297][T24300] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.898293][T24300] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.941152][T24300] bridge_slave_0: entered allmulticast mode [ 349.957203][T24300] bridge_slave_0: entered promiscuous mode [ 349.984368][T24300] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.009940][T24300] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.017263][T24300] bridge_slave_1: entered allmulticast mode [ 350.051266][T24300] bridge_slave_1: entered promiscuous mode [ 350.098937][T24300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.121324][T24300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.153537][T24300] team0: Port device team_slave_0 added [ 350.176130][T24300] team0: Port device team_slave_1 added [ 350.318516][T24300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.325485][T24300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.378599][T24300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.422699][T24300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.438558][T24300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.465973][T24300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.593103][T24397] syz_tun: entered allmulticast mode [ 350.623548][T24300] hsr_slave_0: entered promiscuous mode [ 350.635528][T24300] hsr_slave_1: entered promiscuous mode [ 350.648609][T24300] debugfs: 'hsr0' already exists in 'hsr' [ 350.662036][T24300] Cannot create hsr debugfs directory [ 350.698638][T24393] syz_tun: left allmulticast mode [ 350.926402][T24433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7285'. [ 351.146862][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7291'. [ 351.184017][T24300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.216986][T24300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.234214][T24300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.256383][T24300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.296455][T24472] netlink: 'syz.0.7295': attribute type 10 has an invalid length. [ 351.318548][T24472] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.7295'. [ 351.378188][T24300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.423182][T24300] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.435650][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.442816][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.465152][T24300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.479426][T24300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.531454][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.538699][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.652102][T24527] netlink: 'syz.3.7307': attribute type 1 has an invalid length. [ 351.663680][T24300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.725953][ T28] audit: type=1400 audit(1777187453.175:3847): avc: denied { listen } for pid=24534 comm="syz.6.7308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.768685][T24527] gretap1: entered allmulticast mode [ 351.847896][T24527] bond11: (slave gretap1): making interface the new active one [ 351.869025][T24527] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 351.992187][T24300] veth0_vlan: entered promiscuous mode [ 352.023631][T24300] veth1_vlan: entered promiscuous mode [ 352.035952][ T28] audit: type=1400 audit(1777187453.475:3848): avc: denied { ioctl } for pid=24560 comm="syz.6.7315" path="socket:[69579]" dev="sockfs" ino=69579 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.042552][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7318'. [ 352.078124][T24300] veth0_macvtap: entered promiscuous mode [ 352.090952][T24300] veth1_macvtap: entered promiscuous mode [ 352.111667][ T28] audit: type=1400 audit(1777187453.565:3849): avc: denied { map_create } for pid=24568 comm="syz.8.7319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.136186][T24300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.163146][ T28] audit: type=1400 audit(1777187453.565:3850): avc: denied { map_read map_write } for pid=24568 comm="syz.8.7319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.179846][T24567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.219533][T24570] bond2: option ad_select: unable to set because the bond device is up [ 352.229048][ T28] audit: type=1400 audit(1777187453.595:3851): avc: denied { prog_load } for pid=24568 comm="syz.8.7319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.254467][T24300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.304658][ T28] audit: type=1400 audit(1777187453.755:3852): avc: denied { prog_run } for pid=24579 comm="syz.6.7323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.344871][T24585] VFS: Mount too revealing [ 352.369051][ T322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.378324][ T322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.411309][ T322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.442926][ T322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.856549][T24641] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7343'. [ 352.887086][ T28] audit: type=1326 audit(1777187454.335:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24637 comm="syz.6.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 352.925696][ T28] audit: type=1326 audit(1777187454.335:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24637 comm="syz.6.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 352.957536][ T28] audit: type=1326 audit(1777187454.335:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24637 comm="syz.6.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26dbfbc819 code=0x7ffc0000 [ 353.560010][T24757] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7357'. [ 353.823609][T24805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7372'. [ 356.990179][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 356.990253][ T28] audit: type=1400 audit(1777187458.445:3868): avc: denied { name_bind } for pid=24830 comm="syz.1.7384" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 357.125081][T24851] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7393'. [ 357.160314][T24855] netlink: 27 bytes leftover after parsing attributes in process `syz.6.7396'. [ 357.174600][T24853] netlink: 'syz.3.7395': attribute type 13 has an invalid length. [ 357.465110][T24888] netlink: 27 bytes leftover after parsing attributes in process `syz.8.7410'. [ 357.625220][T24901] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.632532][T24901] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.714009][T24901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.736681][T24901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.793154][T24908] tipc: Started in network mode [ 357.798133][T24908] tipc: Node identity ac14142f, cluster identity 4711 [ 357.844416][T24908] tipc: New replicast peer: 0.0.0.0 [ 357.856123][T24908] tipc: Enabled bearer , priority 10 [ 357.864542][ T70] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.876907][ T70] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.887961][T24915] tipc: New replicast peer: 172.20.20.12 [ 357.895855][ T70] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.908747][ T70] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.388306][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7437'. [ 358.409678][T24949] netlink: 'syz.8.7434': attribute type 5 has an invalid length. [ 358.417484][T24949] netlink: 45 bytes leftover after parsing attributes in process `syz.8.7434'. [ 358.498679][T24954] erspan0: entered promiscuous mode [ 358.504069][T24954] macvtap1: entered promiscuous mode [ 358.548748][T24954] macvtap1: entered allmulticast mode [ 358.555736][T24954] erspan0: entered allmulticast mode [ 358.958740][T24979] netlink: 'syz.0.7449': attribute type 5 has an invalid length. [ 358.966565][T24979] netlink: 45 bytes leftover after parsing attributes in process `syz.0.7449'. [ 358.978635][ T8372] tipc: Node number set to 2886997039 [ 359.096880][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7454'. [ 359.158669][T25002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.193763][T25002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.261822][T25009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7459'. [ 359.345281][ T28] audit: type=1400 audit(1777187460.795:3869): avc: denied { write } for pid=25013 comm="syz.1.7461" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 359.481072][T25020] vcan0: tx address claim with different name [ 359.526914][T25024] netlink: 'syz.0.7467': attribute type 3 has an invalid length. [ 359.542844][T25024] netlink: 'syz.0.7467': attribute type 1 has an invalid length. [ 359.563232][T25024] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.7467'. [ 360.036345][T25047] loop1: detected capacity change from 0 to 512 [ 360.089118][T25047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.101777][T25047] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.133802][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.145991][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.158060][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.169783][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.181769][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.193539][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.205230][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.217143][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.228798][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.240808][T24300] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 360.301084][T25070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7489'. [ 360.330183][T24300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.614747][ T28] audit: type=1326 audit(1777187462.065:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25112 comm="syz.0.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 360.652392][ T28] audit: type=1326 audit(1777187462.095:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25112 comm="syz.0.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 360.681027][ T28] audit: type=1326 audit(1777187462.095:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25112 comm="syz.0.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 360.715488][T16181] bridge_slave_1: left allmulticast mode [ 360.728026][T16181] bridge_slave_1: left promiscuous mode [ 360.748518][T16181] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.770452][T16181] bridge_slave_0: left allmulticast mode [ 360.785620][ T28] audit: type=1326 audit(1777187462.095:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25112 comm="syz.0.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 360.785663][T16181] bridge_slave_0: left promiscuous mode [ 360.848682][T16181] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.889280][ T28] audit: type=1326 audit(1777187462.095:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25112 comm="syz.0.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 360.944441][ T28] audit: type=1326 audit(1777187462.095:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25112 comm="syz.0.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 361.010987][ T28] audit: type=1326 audit(1777187462.095:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25112 comm="syz.0.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 361.075358][ T28] audit: type=1326 audit(1777187462.095:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25112 comm="syz.0.7504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 361.260450][T25142] sctp: [Deprecated]: syz.6.7509 (pid 25142) Use of int in maxseg socket option. [ 361.260450][T25142] Use struct sctp_assoc_value instead [ 361.334732][T16181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.597704][T16181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.617152][T16181] bond0 (unregistering): Released all slaves [ 361.643088][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7510'. [ 361.737279][T16181] hsr_slave_0: left promiscuous mode [ 361.743989][T16181] hsr_slave_1: left promiscuous mode [ 361.750153][T16181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.758023][T16181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.812870][T16181] team0 (unregistering): Port device team_slave_1 removed [ 361.823014][T16181] team0 (unregistering): Port device team_slave_0 removed [ 361.936299][T25158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7516'. [ 361.958960][T25162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7517'. [ 362.035144][T25079] chnl_net:caif_netlink_parms(): no params data found [ 362.101842][T25079] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.110704][T25079] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.118311][T25079] bridge_slave_0: entered allmulticast mode [ 362.125279][T25079] bridge_slave_0: entered promiscuous mode [ 362.132795][T25079] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.140371][T25079] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.147875][T25079] bridge_slave_1: entered allmulticast mode [ 362.154926][T25079] bridge_slave_1: entered promiscuous mode [ 362.195274][T25079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.212365][T25079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.245763][T25079] team0: Port device team_slave_0 added [ 362.258732][T25079] team0: Port device team_slave_1 added [ 362.276867][T25079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.294669][T25079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.342084][T25079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.364929][T25079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.374406][T25079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.409636][T25079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.464606][T25079] hsr_slave_0: entered promiscuous mode [ 362.484977][T25079] hsr_slave_1: entered promiscuous mode [ 362.492309][T25079] debugfs: 'hsr0' already exists in 'hsr' [ 362.498201][T25079] Cannot create hsr debugfs directory [ 362.712589][T25241] netlink: 'syz.6.7535': attribute type 3 has an invalid length. [ 362.720749][T25241] netlink: 'syz.6.7535': attribute type 1 has an invalid length. [ 362.801266][T25079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.810240][T25079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.820259][T25079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.830245][T25079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.926273][T25079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.954021][T25079] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.971148][T16181] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.978273][T16181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.003234][T16181] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.010412][T16181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.164646][T25079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.180280][T25265] bond3: entered promiscuous mode [ 363.185868][T25265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.237274][T25265] bridge3: entered promiscuous mode [ 363.248165][T25265] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 363.297466][T25265] bond3: left promiscuous mode [ 363.307288][T25265] bridge3: left promiscuous mode [ 363.314375][T25265] bond3: entered allmulticast mode [ 363.319880][T25265] bridge3: entered allmulticast mode [ 363.353488][T25079] veth0_vlan: entered promiscuous mode [ 363.404440][T25079] veth1_vlan: entered promiscuous mode [ 363.459938][T25288] netlink: 'syz.8.7545': attribute type 4 has an invalid length. [ 363.511421][T25288] netlink: 'syz.8.7545': attribute type 4 has an invalid length. [ 363.520104][T25079] veth0_macvtap: entered promiscuous mode [ 363.549972][T25079] veth1_macvtap: entered promiscuous mode [ 363.582185][T25079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.639602][T25079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.683622][T16181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.713856][T16181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.739331][T16181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.758322][T16181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.775487][T25316] loop8: detected capacity change from 0 to 512 [ 363.953504][T25334] netlink: 'syz.8.7556': attribute type 1 has an invalid length. [ 364.013536][T25334] bond2: entered promiscuous mode [ 364.051948][T25334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.186418][T25352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.196299][T25352] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 364.208155][T25352] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 364.235631][T25352] bond2: (slave gre1): making interface the new active one [ 364.253788][T25352] gre1: entered promiscuous mode [ 364.269887][T25352] bond2: (slave gre1): Enslaving as an active interface with an up link [ 364.593077][T25415] team_slave_1: entered allmulticast mode [ 364.688426][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 364.688443][ T28] audit: type=1326 audit(1777187466.135:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 364.739576][ T28] audit: type=1326 audit(1777187466.175:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 364.783210][ T28] audit: type=1326 audit(1777187466.175:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 364.807026][ T28] audit: type=1326 audit(1777187466.175:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 364.847233][ T28] audit: type=1326 audit(1777187466.175:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 364.917480][T25445] netlink: 'syz.3.7577': attribute type 1 has an invalid length. [ 364.930916][ T28] audit: type=1326 audit(1777187466.175:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 364.978147][T25445] bond12: entered promiscuous mode [ 365.016243][T25445] 8021q: adding VLAN 0 to HW filter on device bond12 [ 365.248233][ T28] audit: type=1326 audit(1777187466.175:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 365.272980][T25445] 8021q: adding VLAN 0 to HW filter on device bond12 [ 365.282178][T25445] bond12: (slave gre4): The slave device specified does not support setting the MAC address [ 365.301702][T25445] bond12: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 365.334202][ T28] audit: type=1326 audit(1777187466.175:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 365.649019][T25445] bond12: (slave gre4): making interface the new active one [ 365.668549][T25445] gre4: entered promiscuous mode [ 365.680180][T25445] bond12: (slave gre4): Enslaving as an active interface with an up link [ 365.701443][ T28] audit: type=1326 audit(1777187466.185:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 365.748536][ T28] audit: type=1326 audit(1777187466.185:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25425 comm="syz.3.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7ff39cedc819 code=0x7ffc0000 [ 365.966714][T25488] __nla_validate_parse: 2 callbacks suppressed [ 365.966731][T25488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7587'. [ 366.743716][T25558] netlink: 'syz.2.7595': attribute type 1 has an invalid length. [ 368.070713][T25698] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7607'. [ 368.416005][T25726] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7610'. [ 368.598954][T25571] erspan0: left allmulticast mode [ 368.661378][T25689] ip6tnl0: Caught tx_queue_len zero misconfig [ 368.684526][ T5216] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.707736][ T5216] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.782037][T16174] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.798801][T16174] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.820468][ T5216] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.828875][T25777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7623'. [ 368.848745][ T5216] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.857298][ T5216] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.875131][ T5216] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.918157][T16174] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.930430][T16174] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.942325][T25786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25786 comm=syz.3.7624 [ 368.969861][ T5216] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.978247][ T5216] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.012274][T16174] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.023200][T16174] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.100192][T25807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7631'. [ 369.120035][T25800] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 369.146098][T16174] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.170112][T16174] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.335340][T25836] netlink: 'syz.2.7640': attribute type 1 has an invalid length. [ 369.412144][T16174] bridge_slave_1: left allmulticast mode [ 369.424752][T16174] bridge_slave_1: left promiscuous mode [ 369.433675][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7641'. [ 369.443244][T16174] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.471873][T25849] loop2: detected capacity change from 0 to 512 [ 369.492534][T16174] bridge_slave_0: left allmulticast mode [ 369.498197][T16174] bridge_slave_0: left promiscuous mode [ 369.504210][T25849] EXT4-fs: Ignoring removed nobh option [ 369.521252][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7644'. [ 369.530699][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.540462][T25849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.553129][T25851] loop8: detected capacity change from 0 to 8192 [ 369.553552][T25849] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.590812][T25857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7644'. [ 369.662131][T25079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.726111][T25847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7641'. [ 369.773023][T16174] tipc: Left network mode [ 369.792753][T16174] hsr_slave_0: left promiscuous mode [ 369.805503][T16174] hsr_slave_1: left promiscuous mode [ 369.807444][T25870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7657'. [ 369.823093][T16174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.845282][T16174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.888932][T16174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.907144][T16174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.928714][T25870] netlink: 'syz.0.7657': attribute type 7 has an invalid length. [ 369.974516][T16174] veth1_macvtap: left promiscuous mode [ 369.981714][T25870] netlink: 'syz.0.7657': attribute type 8 has an invalid length. [ 369.990437][T16174] veth0_macvtap: left promiscuous mode [ 369.996150][T16174] veth1_vlan: left promiscuous mode [ 370.187852][T16174] team0 (unregistering): Port device team_slave_1 removed [ 370.200122][T16174] team0 (unregistering): Port device team_slave_0 removed [ 370.431264][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 370.431293][ T28] audit: type=1400 audit(1777187471.885:3981): avc: denied { accept } for pid=25900 comm="syz.6.7653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.691993][T16174] IPVS: stop unused estimator thread 0... [ 370.793870][T25946] netlink: 'syz.0.7669': attribute type 4 has an invalid length. [ 370.846936][T25946] netlink: 'syz.0.7669': attribute type 4 has an invalid length. [ 371.660866][T26008] xt_hashlimit: size too large, truncated to 1048576 [ 372.377286][T26039] netlink: 'syz.2.7696': attribute type 10 has an invalid length. [ 372.412986][T26039] team0: Failed to send options change via netlink (err -105) [ 372.420805][T26039] team0: Port device dummy0 added [ 372.431634][T26039] netlink: 'syz.2.7696': attribute type 10 has an invalid length. [ 372.440386][T26039] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 372.453676][T26039] team0: Failed to send options change via netlink (err -105) [ 372.461768][T26039] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 372.472149][T26039] team0: Port device dummy0 removed [ 372.480206][T26039] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.435184][T26055] __nla_validate_parse: 1 callbacks suppressed [ 373.435201][T26055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7700'. [ 373.963067][ T28] audit: type=1326 audit(1777187475.415:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 373.987414][ T28] audit: type=1326 audit(1777187475.415:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 374.011163][T25967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.037058][ T28] audit: type=1326 audit(1777187475.445:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 374.070399][ T28] audit: type=1326 audit(1777187475.445:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 374.124816][T26108] loop8: detected capacity change from 0 to 512 [ 374.133449][ T28] audit: type=1326 audit(1777187475.445:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 374.157727][ T28] audit: type=1326 audit(1777187475.475:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 374.203963][T26108] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.7720: inode has both inline data and extents flags [ 374.218201][T26108] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.218504][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 374.220978][T26108] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.7720: couldn't read orphan inode 15 (err -117) [ 374.227919][ C1] EXT4-fs (loop8): initial error at time 1777187475: ext4_orphan_get:1397: inode 15 [ 374.255828][ C1] EXT4-fs (loop8): last error at time 1777187475: ext4_orphan_get:1397: inode 15 [ 374.265105][T26108] loop8: lost filesystem error report for type 5 error -117 [ 374.265643][T26108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.273145][ T28] audit: type=1326 audit(1777187475.475:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 374.310308][ T28] audit: type=1326 audit(1777187475.475:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 374.334031][ T28] audit: type=1326 audit(1777187475.485:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26094 comm="syz.0.7713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 374.400548][T20561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.502245][T26135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.509505][T26135] IPv6: NLM_F_CREATE should be set when creating new route [ 374.866647][T26132] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.874064][T26132] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.042331][T16172] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.066051][T16172] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.080799][ T8376] kernel write not supported for file bpf-prog (pid: 8376 comm: kworker/0:10) [ 375.103237][T16172] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.115150][T16172] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.144235][T26152] netlink: 'syz.8.7737': attribute type 1 has an invalid length. [ 375.152237][T16172] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.165010][T16172] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.185786][T26156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=26156 comm=syz.6.7739 [ 375.200147][T16172] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.223035][T16172] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.243586][T26156] netlink: 1195 bytes leftover after parsing attributes in process `syz.6.7739'. [ 375.357968][T26176] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.7744'. [ 375.373499][T26176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7744'. [ 377.192824][T26334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7782'. [ 377.278040][T26334] team0: Port device team_slave_0 removed [ 377.388773][T26343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7785'. [ 377.528444][T26347] loop2: detected capacity change from 0 to 1764 [ 377.554377][T26347] iso9660: Unknown parameter 'nojoock' [ 377.674091][T26359] netlink: 'syz.3.7791': attribute type 1 has an invalid length. [ 377.684497][T26360] loop2: detected capacity change from 0 to 512 [ 377.697916][T26359] 8021q: adding VLAN 0 to HW filter on device bond13 [ 377.726487][T26359] bond13 (unregistering): Released all slaves [ 377.893200][T26380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7799'. [ 377.941233][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 377.941249][ T28] audit: type=1326 audit(1777187479.395:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 377.999842][ T28] audit: type=1326 audit(1777187479.395:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 378.060012][ T28] audit: type=1326 audit(1777187479.395:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88cc99c582 code=0x7ffc0000 [ 378.117510][ T28] audit: type=1326 audit(1777187479.395:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88cc95d04e code=0x7ffc0000 [ 378.151578][T26396] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7807'. [ 378.166199][ T28] audit: type=1326 audit(1777187479.395:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f88cc99c647 code=0x7ffc0000 [ 378.217579][ T28] audit: type=1326 audit(1777187479.395:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88cc95d04e code=0x7ffc0000 [ 378.268252][ T28] audit: type=1326 audit(1777187479.395:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f88cc95d04e code=0x7ffc0000 [ 378.316724][ T28] audit: type=1326 audit(1777187479.395:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 378.365860][ T28] audit: type=1326 audit(1777187479.395:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 378.390997][ T28] audit: type=1326 audit(1777187479.395:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26381 comm="syz.0.7800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88cc99c819 code=0x7ffc0000 [ 379.751201][T26415] netlink: 'syz.3.7812': attribute type 8 has an invalid length. [ 379.760070][T26415] netlink: 'syz.3.7812': attribute type 7 has an invalid length. [ 379.767908][T26415] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.7812'. [ 381.213411][T26427] netlink: 'syz.8.7816': attribute type 13 has an invalid length. [ 381.237933][T26429] loop2: detected capacity change from 0 to 1024 [ 381.268969][T26429] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.331840][T26429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.449385][T25079] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.330495][T26530] tipc: Failed to remove unknown binding: 66,1,1/0:1179698667/1179698669 [ 382.348825][T26530] tipc: Failed to remove unknown binding: 66,1,1/0:1179698667/1179698669 [ 382.383142][ T23] ================================================================== [ 382.391339][ T23] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 382.398398][ T23] [ 382.400714][ T23] read-write to 0xffff888237c2a8a4 of 4 bytes by task 8439 on cpu 0: [ 382.408755][ T23] wq_worker_running+0x9b/0x120 [ 382.413591][ T23] schedule_preempt_disabled+0x10/0x20 [ 382.419036][ T23] __mutex_lock+0x502/0xed0 [ 382.423530][ T23] __mutex_lock_slowpath+0xa/0x10 [ 382.428546][ T23] mutex_lock+0x88/0x90 [ 382.432683][ T23] synchronize_rcu_expedited+0x18a/0x770 [ 382.438302][ T23] synchronize_rcu+0x35/0x2e0 [ 382.442960][ T23] xfrm_state_gc_task+0x98/0x650 [ 382.447966][ T23] process_scheduled_works+0x513/0xa10 [ 382.453582][ T23] worker_thread+0x58a/0x780 [ 382.458157][ T23] kthread+0x22a/0x280 [ 382.462204][ T23] ret_from_fork+0x150/0x360 [ 382.466779][ T23] ret_from_fork_asm+0x1a/0x30 [ 382.471542][ T23] [ 382.473845][ T23] read to 0xffff888237c2a8a4 of 4 bytes by task 23 on cpu 1: [ 382.481190][ T23] kick_pool+0x49/0x2d0 [ 382.485331][ T23] __queue_work+0x896/0xaf0 [ 382.489844][ T23] queue_work_on+0xa9/0x140 [ 382.494342][ T23] process_srcu+0xa56/0xdc0 [ 382.498892][ T23] process_scheduled_works+0x513/0xa10 [ 382.504425][ T23] worker_thread+0x58a/0x780 [ 382.509015][ T23] kthread+0x22a/0x280 [ 382.513080][ T23] ret_from_fork+0x150/0x360 [ 382.517820][ T23] ret_from_fork_asm+0x1a/0x30 [ 382.522669][ T23] [ 382.524989][ T23] value changed: 0x00000000 -> 0x00000001 [ 382.530788][ T23] [ 382.533096][ T23] Reported by Kernel Concurrency Sanitizer on: [ 382.539249][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(full) [ 382.550109][ T23] Tainted: [W]=WARN [ 382.553897][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.564060][ T23] Workqueue: rcu_gp process_srcu [ 382.569102][ T23] ==================================================================