last executing test programs: 6m40.747885008s ago: executing program 1 (id=1637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/195, 0xc3}], 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000006000000000000004ffb000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c0}, 0xf4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r10}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r10}, 0x18) r11 = msgget$private(0x0, 0x90) msgsnd(r11, &(0x7f0000000140)={0x1, "ae40dda73c70c163ef41f491b44074a4a8e4550d2703f39565b3f38863ba9c849fe5b6662bfd94584f58060a7d08a49db5f46a59cb230a0d7d7bd1596393ed6fb49d63d25f79360b436fa29fbd017975034e546f7a4e867dff7ab82c940d3e7e01aab2ec4d90cd270c3cb6c73e79a7410d708d8bb80588eab23f44ae913114c9cbc17d33"}, 0x8c, 0x800) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r8) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x248, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff3}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "f63e4ab45bfab236793e144b3cbe92c1dec1cc72f2cd60fb8ec1b82400f038927a98eb8d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcb9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xba35}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x122d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800000}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x51a}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4004011}, 0x24008815) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@access_uid}]}}) 6m40.411968881s ago: executing program 1 (id=1638): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) 6m40.387050764s ago: executing program 1 (id=1639): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xb9) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000640)=""/130, 0x82}}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x4040010) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002380)=@newtfilter={0xc10, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xbe0, 0x2, [@TCA_CGROUP_EMATCHES={0xbdc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xbd0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xbcc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xbaa, 0x5, "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"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0xc10}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 6m40.326037829s ago: executing program 1 (id=1641): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18) getpgrp(0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0xfe, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x1141a4, 0x6, 0x0, 0x1, 0xc7a5, 0x20002, 0xb, 0x0, 0x5d, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = io_uring_setup(0x53fd, &(0x7f00000000c0)={0x0, 0xdad1, 0x1000, 0xfffffffd, 0x15c}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0xfff) accept(r4, 0xfffffffffffffffd, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r5 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000280)={r6, 0x1}, &(0x7f0000000380)=0x8) wait4(r5, 0x0, 0x8, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000003c0)={0x8, 0x4, 0x6b0d}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) membarrier(0x4, 0x0) 6m39.410211319s ago: executing program 1 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) r1 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(r1, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) memfd_create(&(0x7f0000000040)='\x00\x00@Z\x82\x1f\xd7\xdc\xe8\x01\x17\xf4\xd6z\xfeJ\xd4k\x01\x00\x00\x00\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec\xb4ZB\x9elG\xfa+q\xa2w\x8d\x991\xc7\xef\x91\xcbZ\xd4\x0f\"U\xbc\x02k\xf4m\x9fXr\x1a\xb9\xc3\xfdaf\xec\xa7\xc2W]\xd8\x1d\xdel\x94\xfd\xd7\xde\x84\xf1n\xc5G\x89\x0e\xa1$6\x06*\x16\xc7\xf6i\xd6r\xcb\xe7Z\xdc\x82\x97\x89\xd3\x80i\xc00\x90\xee\xd6\xc4%,\xaa\f\xf0ra\x98\xca\xc6\x87\xb3\x85\xcc\xe3\x06\xc9\xcc\xe7do\xd8 8\x04\xe1\xa9R\xa0\xe1M\x10\xaa4!\x8f\xcez\x81F\x81\xcd\xdd\x1b\xa7\x85\b\xad)3s\x9f\x90\x85\x82\x1d\xc7\x80h\x87\xa2N\x80\xbf\xf5\xfe\xb9\'QC\xe7d\xc1\x16$\xb1\xd6\x85\xb9[\x16!\xf7{r\x01\x00\x00\x00\x00\x00\x00\x00\xb9#\xe0\xe0\r\x84\xa5\xb5\xe3U\xb3B\x84-\xce\x18!z\xe7\xcd\x93\x9e\xb9#\x8d\x8d\r\x1bD\x05#\xf3$A\xd1\xf5i\x87\x05\xedCo\x92\x84\xfe\x11$p\xab\xbb\n\x19\xe4\xf5t-x\xf3\a\x05n\x13\xe3X\x03\xe2\x04Y9/br\xb0\\\xdcDY\xd9\r\n\xe3Y}\x97,G\xf2\tC\xf3*\x9e\x8c]\x03\x9bt\x85{v3\xdd\x9f\xbc\a\x9eo5\xa2\xe3%\xcd\x19C\xbd*\xdb\xd8\xfe\x9f\xf2%~\xafH\v\x7fh\x88P?\xb8\x94\x8f\x9a\x87\x1c\xfb\x10\x032\xec\x0e\"\xc9\x89\xbd*\xf7\xfd\x17\xbb!\xebN\xe5\x17\xc4\xc7$\x11\xf0\x00G4\n\f\x95\x04\xae}\x81\xc5d\x17\xe4)\xd8\x12\xe6; ,\x0e7\xc1\x81lx', 0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="0380c2000000bbbb9bbbbbbb0800450000380000000009019078ac1e0001ac1414aa030490781209183f2500000000680000000100007f0000017f00000100186371ae9b1c03e2bf87195f0a6d3d64010f5d33a5295536c6c35595a1a93526088e357f295e8819c5f0f13e3e1870441dbd54f72529d8c6dfc70e5bf7c7019c119176e3eb507f8b01dd56c19d0a6ce6f0"], 0x0) 6m39.115967898s ago: executing program 1 (id=1666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x0) splice(r8, 0x0, r7, 0x0, 0x7f, 0xe) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) clock_gettime(0xfffffffffffffffb, 0x0) r11 = syz_clone3(&(0x7f00000004c0)={0x20020000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x2d}, &(0x7f0000000240)=""/66, 0x42, &(0x7f00000003c0)=""/227, &(0x7f0000000140)=[0x0], 0x1, {r3}}, 0x58) syz_open_procfs(r11, &(0x7f00000002c0)='net/dev_snmp6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 6m39.114597589s ago: executing program 32 (id=1666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x0) splice(r8, 0x0, r7, 0x0, 0x7f, 0xe) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x4004000) clock_gettime(0xfffffffffffffffb, 0x0) r11 = syz_clone3(&(0x7f00000004c0)={0x20020000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x2d}, &(0x7f0000000240)=""/66, 0x42, &(0x7f00000003c0)=""/227, &(0x7f0000000140)=[0x0], 0x1, {r3}}, 0x58) syz_open_procfs(r11, &(0x7f00000002c0)='net/dev_snmp6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 4m33.841287986s ago: executing program 4 (id=3869): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000840)=[{0x6, 0x1, 0x8}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000009867000000000000006c0000002020207b1af8ffa4a117f800000000bfa100000000000007010000f8ff06000000000008000002b70300000700000085000000060000008500000029d906f395000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x6b16, &(0x7f00000002c0)=0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001480)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3}]}, 0x10) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r6 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r6, 0x43403d05, 0x0) 4m32.912535368s ago: executing program 4 (id=3885): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) timerfd_create(0x8, 0x80800) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 4m32.056989241s ago: executing program 4 (id=3900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00'}, 0x18) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) 4m32.004073397s ago: executing program 4 (id=3901): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x60, r1, 0x418, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bridge\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1b11}]}, 0x60}, 0x1, 0x0, 0x0, 0x4091}, 0x20000040) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}, @union={0x3, 0x9, 0x0, 0x5, 0x0, 0x3, [{0x10, 0x0, 0xd}, {0x2, 0x1, 0x20e}, {0xd, 0x0, 0xfffffc01}, {0xd, 0x2, 0x1}, {0x1, 0x3, 0x2}, {0x2, 0x3, 0x101}, {0x8, 0x5, 0x2}, {0x3, 0x5}, {0xb, 0x5, 0x7}]}]}, {0x0, [0x5f]}}, &(0x7f0000000cc0)=""/169, 0xb7, 0xa9, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="3100e6000000000000181100052d18e642b12c33bf19ec841321b6f101febc94b56fd6b4ba962922e09e213c47433abd53bb26941c01ec27130a3079629ecac4f5c1a0b8c1cfd4af7f3b6bf653b22297c705a8219538af6e22cf0d4f4a22e18bc2d4b6000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000007020000f8ffffffb70300000800000000000000000000c39dd1282697a1dd3b6bcab65b70aa6abaecdb73d07c6e08dd34b55aecb85b7f0fc27373920f9985d09950485e0edfec059224bbca8706abb285"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000005580)='./file0\x00', 0x0, &(0x7f0000000880)={[{@quota}, {@acl}]}, 0x1, 0x3d4, &(0x7f00000008c0)="$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") r7 = openat(0xffffffffffffff9c, 0x0, 0x14b442, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000000)={0x17c04, r7, 0xa, 0xc741, 0x80, 0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r8 = pidfd_getfd(r3, r3, 0x0) (rerun: 32) setns(r8, 0x66020000) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (rerun: 32) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (rerun: 32) 4m31.836257003s ago: executing program 4 (id=3903): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffff8f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000000000001b0000000c000180080001001c7aa0a57a0aaf9906ba13ac2c214f26eab4e88b9473100256879f", @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x7, 0x91, 0x9}, {0xff, 0x8, 0x81, 0x100}, {0x498, 0x40, 0x5, 0x2}]}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r9 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)=')@/#-^^\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='syztnl0\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)=',)\x00', &(0x7f0000000240)='syztnl1\x00', &(0x7f0000000280)='syztnl0\x00', &(0x7f00000002c0)='syztnl1\x00']}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) r10 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r10}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r11, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12, 0x0, 0x2}, 0x18) 4m31.604558806s ago: executing program 4 (id=3907): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000600)="03", 0x1}, {&(0x7f0000000140)="ff", 0x1}, {&(0x7f00000003c0)='c', 0x1}, {&(0x7f0000001040)="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", 0xfc1}, {&(0x7f0000000080)='$', 0xfe5a}, {&(0x7f0000002040)="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", 0xfc1}], 0x6, 0xf) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kvm_ack_irq\x00', r2, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) getpriority(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) sendmsg$inet(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) sync() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r8 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x1) ioctl$SG_IO(r8, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x50, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000280)="44bc606abb2e", 0x0, 0xfdfbfffd, 0x10033, 0x1, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r10, &(0x7f0000002f40)=""/4098, 0x1002) close(r3) sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) getpid() 4m31.579281388s ago: executing program 33 (id=3907): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000600)="03", 0x1}, {&(0x7f0000000140)="ff", 0x1}, {&(0x7f00000003c0)='c', 0x1}, {&(0x7f0000001040)="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", 0xfc1}, {&(0x7f0000000080)='$', 0xfe5a}, {&(0x7f0000002040)="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", 0xfc1}], 0x6, 0xf) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kvm_ack_irq\x00', r2, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) getpriority(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) sendmsg$inet(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) sync() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r8 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x1) ioctl$SG_IO(r8, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x50, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000280)="44bc606abb2e", 0x0, 0xfdfbfffd, 0x10033, 0x1, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r10, &(0x7f0000002f40)=""/4098, 0x1002) close(r3) sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) getpid() 1.616547091s ago: executing program 3 (id=12266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x400, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) ppoll(&(0x7f0000000040)=[{r0, 0x901}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 1.393268103s ago: executing program 0 (id=12281): r0 = socket$inet6(0xa, 0x2, 0x0) getpid() munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x68}, {0x0}], 0x2}, 0x2}], 0x1, 0x1, 0x0) 1.099383062s ago: executing program 6 (id=12304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) 1.081544623s ago: executing program 6 (id=12306): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.050013316s ago: executing program 6 (id=12308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 992.313892ms ago: executing program 6 (id=12309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000070000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/195, 0xc3}], 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000006000000000000004ffb000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c0}, 0xf4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r10}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r10}, 0x18) r11 = msgget$private(0x0, 0x90) msgsnd(r11, &(0x7f0000000140)={0x1, "ae40dda73c70c163ef41f491b44074a4a8e4550d2703f39565b3f38863ba9c849fe5b6662bfd94584f58060a7d08a49db5f46a59cb230a0d7d7bd1596393ed6fb49d63d25f79360b436fa29fbd017975034e546f7a4e867dff7ab82c940d3e7e01aab2ec4d90cd270c3cb6c73e79a7410d708d8bb80588eab23f44ae913114c9cbc17d33"}, 0x8c, 0x800) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r8) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x210, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff3}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "f63e4ab45bfab236793e144b3cbe92c1dec1cc72f2cd60fb8ec1b82400f038927a98eb8d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd8}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcb9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xba35}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x51a}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4004011}, 0x24008815) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@access_uid}]}}) 954.303696ms ago: executing program 5 (id=12311): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000700)={'vxcan1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x7f, 0x2, 0x66, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7, 0x5, 0x200}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x40, 0x1, 0xb, 0x0, {{0x46, 0x4, 0x2, 0x12, 0x118, 0x65, 0x0, 0x5, 0x2e482488771dd2e, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x59, 0x0, [{0x1, 0x12, "a000277761e553c09085c0216fe096d2"}, {0x5, 0xc, "07b4a61cd0916f0a4fef"}, {0x7, 0xd, "d817c11e7b9fcbfb7c94eb"}, {0x0, 0x4, "8cce"}, {0x2, 0xd, "e7175f4a11c10696bc3006"}, {0x1, 0x10, "05000000000000002bfecaf5c8c3"}, {0x6, 0x7, "09eb4d9c57"}]}, @rr={0x7, 0x13, 0x11, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x18, 0x11, 0x0, 0x7, [0x2, 0xffff, 0x1c0, 0x0, 0x5]}, @cipso={0x86, 0x3f, 0x3, [{0x7, 0xb, "24e427cf126c0bb2a3"}, {0x0, 0x4, "d19a"}, {0x1, 0xe, "79076cb90ed8302b3d4b63c1"}, {0x0, 0x10, "41f07585567da49958ff65fd2026"}, {0x7, 0x2}, {0x1, 0xa, "db8f6ba82de8e60a"}]}, @timestamp_addr={0x44, 0x3c, 0x6c, 0x1, 0x8, [{@multicast2, 0x1}, {@broadcast, 0x5751}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x80000001}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x79}, {@private=0xa010101, 0xa68b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r10, {0x4, 0x4}, {}, {0xfffe, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0xffffffffffffffb7, 0x5, {0xa, 0x4, 0x2, 0xffff, 0x0, 0x800, 0x3, 0x1, [{0x3, 0x0, 0x2, 0x7}, {0x7, 0x7f, 0xfffffffb, 0xe4d}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2002c8d5}, 0x20040054) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x2002, {0x0, 0x0, 0x0, r12, {0xa, 0x6}, {0x0, 0x7}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f00000009c0)={0x7e4, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x873}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x46, 0x99, 0xb5}, {0x3, 0xd4, 0x7, 0x6}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x48, 0x5, 0x4}, {0x401, 0x6a, 0xe, 0xfffff800}, {0x7, 0x0, 0x8}, {0x8000, 0x81, 0xf4, 0xc}, {0xa17, 0x3, 0x5, 0x400}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5e}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x10, 0x0, 0x3}, {0x17b, 0x6, 0x8a, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x45}}}]}}, {{0x8, 0x1, r6}, {0x17c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xabf8, 0x8b, 0x9, 0x80000001}, {0xd62, 0x10, 0x7f, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8, 0x7, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x7e4}, 0x1, 0x0, 0x0, 0x80c4}, 0xa0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x24, r3, 0x800, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3ff}]}, 0x24}}, 0x0) 901.778231ms ago: executing program 6 (id=12312): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x40}, 0x4) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000540)="1afb1f0000", 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@in={0x2, 0x0, @empty}, &(0x7f0000000340)=0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000006c0)={0x0, 0x10, 0x3ff}, &(0x7f0000000600)=0xd) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000640)=r4, 0x4) sendto$inet6(r1, &(0x7f0000000040)='l', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffc000/0x1000)=nil, 0x3) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x70, r9, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYBLOB="020002000000ffdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000a000000360000000a00180003030303030300000a00180003030303030300000400cc00"], 0x44}, 0x1, 0x0, 0x0, 0x24048000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xfffffd2e, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x32, &(0x7f0000000100)=0x5, 0x4) 708.59355ms ago: executing program 3 (id=12313): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 708.03365ms ago: executing program 3 (id=12314): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002003, 0x0) 665.243224ms ago: executing program 3 (id=12315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 665.042324ms ago: executing program 3 (id=12316): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 664.754874ms ago: executing program 3 (id=12317): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c61ff51f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557", 0x70}], 0x1}}], 0x1, 0x480e0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet_tcp(0x2, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 511.237209ms ago: executing program 0 (id=12318): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 510.709899ms ago: executing program 0 (id=12319): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 498.08882ms ago: executing program 0 (id=12320): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delqdisc={0x11c, 0x25, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x1}, {0x0, 0xc}, {0xfffa, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xf, 0x4000, 0xfffffffe, 0x2, 0x2d, 0x454b, 0x1}}, {0x6, 0x2, [0x1ff]}}, {{0x1c, 0x1, {0x7, 0x9, 0x4, 0x1000, 0x1, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0x0, 0xfffb, 0x200]}}, {{0x1c, 0x1, {0x6a, 0x5, 0x0, 0x4, 0x2, 0x400, 0x6, 0x1}}, {0x6, 0x2, [0xf8]}}, {{0x1c, 0x1, {0x5, 0x9, 0x400, 0x4, 0x0, 0x0, 0x7, 0x9}}, {0x16, 0x2, [0xfffe, 0x1, 0xe, 0x1, 0x2, 0x3, 0x5, 0x4, 0x1ff]}}, {{0x1c, 0x1, {0xb, 0x4, 0x8, 0xcc45, 0x0, 0x7, 0xfffffffc, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x8, 0x5, 0x6, 0x200, 0x2, 0x7, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x11c}}, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 481.377192ms ago: executing program 0 (id=12321): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d}, 0x94) 460.292274ms ago: executing program 0 (id=12322): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7f) 204.073959ms ago: executing program 2 (id=12323): capset(&(0x7f0000000040)={0x20080522}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 203.608479ms ago: executing program 5 (id=12324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000900008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) 164.804473ms ago: executing program 2 (id=12325): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000d190000f10000000000000630000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000000000bc10000000020000000000000000000095000e00000000002ee7d2fb5f17dd620037026c2acd90a6513e01dc634dbfc7ac648226ba4f63228c1858f00920eece9e01f0ef99d2d49c8e3a7142e7242b9ad5488a0c898ea3b599"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 163.854383ms ago: executing program 5 (id=12326): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002003, 0x0) 146.846685ms ago: executing program 2 (id=12327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) 125.913637ms ago: executing program 5 (id=12328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/18, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) 125.634587ms ago: executing program 2 (id=12329): r0 = socket(0xa, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 99.10246ms ago: executing program 2 (id=12330): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 98.67584ms ago: executing program 5 (id=12331): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 72.214272ms ago: executing program 2 (id=12332): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000001300)=""/4096, 0x1000, 0x0, &(0x7f0000000640)=""/130, 0x82}}, 0x10) r12 = syz_open_dev$vcsa(&(0x7f0000000700), 0x4, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="89f900000000000000000000ff01000085100000000000004a700200fcfffffff77d4c000200000085100000faffffff9500000000000000640ebdcdfc515af1892d7c63182d5bb6df921b509e111faa4c2a40cce1bf417644953a21a091dbee28f7e8893e87a168eab11f4daf6f470a2a62e1ed0e25438cb7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x7d, &(0x7f0000000340)=""/125, 0x41100, 0x10, '\x00', r10, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x5, 0x401, 0x2}, 0x10, r11, r12, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002380)=@newtfilter={0x1068, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1038, 0x2, [@TCA_CGROUP_EMATCHES={0x1034, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1028, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1024, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x1068}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xee8a) socket$inet(0x2, 0x2, 0x1) ioctl$EVIOCSABS2F(r12, 0x401845ef, &(0x7f0000000740)={0x0, 0xe, 0x4, 0x2, 0x165}) 45.974195ms ago: executing program 5 (id=12333): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r0, 0x0, 0x0, 0x22, 0x0, 0x0) 0s ago: executing program 6 (id=12334): open(0x0, 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f0000000240)="fea5d8dd339c13795bd428fc434442949a3d8f2e2ffc6375cfe96cca63e5f5b2be6c674b7941784a1a8e8a934dd75dbdc4cfd115e108a644f27ca969ad15429bd9a813237e3f8af11c52e633ea7c9a23ccd273db8640b96138151393e33bbca9afdb3ec7f4aab6e6c085", 0xfe0e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): cess `syz.3.9910'. [ 476.245356][T29775] netlink: 'syz.5.9911': attribute type 16 has an invalid length. [ 476.253347][T29775] netlink: 'syz.5.9911': attribute type 17 has an invalid length. [ 476.327196][T29775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.479948][T29801] loop5: detected capacity change from 0 to 128 [ 476.487535][T29800] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9923'. [ 476.508498][ T3407] kernel read not supported for file / (pid: 3407 comm: kworker/1:5) [ 476.517094][ T29] audit: type=1400 audit(2000000361.030:70790): avc: denied { mounton } for pid=29797 comm="syz.5.9924" path="/419/file1" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 476.589201][ T29] audit: type=1326 audit(2000000361.100:70791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29809 comm="syz.5.9930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7359d8efc9 code=0x0 [ 476.843312][T29856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.909122][T29866] loop6: detected capacity change from 0 to 128 [ 476.984889][T29883] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 477.050356][T29890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.091106][T29894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.099153][T29894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.107049][T29894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.114912][T29894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.122935][T29894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.130781][T29894] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 477.305336][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 477.335856][T29922] loop2: detected capacity change from 0 to 128 [ 477.456389][T29931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.609207][T29955] loop2: detected capacity change from 0 to 7 [ 477.759949][T29962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9999'. [ 478.056001][ T29] audit: type=1326 audit(2000000362.580:70792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29973 comm="syz.3.10005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x0 [ 478.208715][T29984] loop2: detected capacity change from 0 to 7 [ 478.505963][T30018] loop2: detected capacity change from 0 to 7 [ 478.717137][T30051] loop2: detected capacity change from 0 to 128 [ 478.724753][T30051] /dev/loop2: Can't open blockdev [ 478.768858][T30056] loop6: detected capacity change from 0 to 128 [ 478.959531][T30084] loop2: detected capacity change from 0 to 128 [ 479.021895][ T29] audit: type=1400 audit(2000000363.540:70793): avc: denied { name_bind } for pid=30092 comm="syz.0.10062" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 479.168008][T30110] loop2: detected capacity change from 0 to 128 [ 479.228400][T30117] validate_nla: 3 callbacks suppressed [ 479.228418][T30117] netlink: 'syz.0.10071': attribute type 4 has an invalid length. [ 479.444141][T30138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10081'. [ 479.490745][T30142] loop2: detected capacity change from 0 to 7 [ 479.559171][T30152] loop2: detected capacity change from 0 to 2048 [ 479.610026][T30152] Alternate GPT is invalid, using primary GPT. [ 479.610301][T30152] loop2: p2 p3 p7 [ 479.746159][T30167] loop6: detected capacity change from 0 to 512 [ 479.753138][T30167] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 480.008101][ T29] audit: type=1326 audit(2000000364.530:70794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30179 comm="syz.3.10100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x0 [ 480.380467][T30183] loop5: detected capacity change from 0 to 128 [ 480.457740][T30191] loop2: detected capacity change from 0 to 7 [ 480.516503][T30201] netlink: 'syz.5.10110': attribute type 1 has an invalid length. [ 480.529905][T30201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.551536][T30201] bond1: (slave ip6erspan0): making interface the new active one [ 480.561076][T30201] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 480.687380][T30216] loop6: detected capacity change from 0 to 128 [ 480.702021][T30216] syz.6.10116: attempt to access beyond end of device [ 480.702021][T30216] loop6: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 480.890877][T30227] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10121'. [ 480.964684][T30232] netlink: 'syz.6.10122': attribute type 1 has an invalid length. [ 480.983843][T30232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.113420][T30246] netlink: 'syz.3.10129': attribute type 12 has an invalid length. [ 481.113443][T30246] netlink: 'syz.3.10129': attribute type 29 has an invalid length. [ 481.113457][T30246] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10129'. [ 481.177520][T30255] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10133'. [ 481.195783][T30257] loop2: detected capacity change from 0 to 7 [ 481.212051][T30259] netlink: 'syz.5.10135': attribute type 1 has an invalid length. [ 481.230611][T30259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.487938][T30277] loop2: detected capacity change from 0 to 128 [ 481.507608][T30279] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10144'. [ 481.745839][ T29] audit: type=1400 audit(2000000366.260:70795): avc: denied { mounton } for pid=30300 comm="syz.0.10153" path="/460/file0" dev="tmpfs" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 481.907180][T30305] sch_tbf: peakrate 21 is lower than or equals to rate 127 ! [ 481.946498][T30308] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10156'. [ 481.971457][T30310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10157'. [ 482.089087][T30312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10158'. [ 482.118028][T30323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10161'. [ 482.163224][ T29] audit: type=1400 audit(2000000366.680:70796): avc: denied { name_bind } for pid=30326 comm="syz.5.10163" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 482.228946][T30339] net_ratelimit: 103 callbacks suppressed [ 482.228965][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229014][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229136][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229174][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229210][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229267][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229386][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229462][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229503][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.229549][T30339] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 482.240225][T30341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10169'. [ 482.419027][T30359] netlink: 'syz.0.10177': attribute type 16 has an invalid length. [ 482.427011][T30359] netlink: 'syz.0.10177': attribute type 17 has an invalid length. [ 482.903500][T30391] loop2: detected capacity change from 0 to 2048 [ 482.917143][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 482.930560][T30391] loop2: p1 < > p3 [ 482.934819][T30391] loop2: p3 size 134217728 extends beyond EOD, truncated [ 483.301300][T30431] netlink: 'syz.5.10211': attribute type 1 has an invalid length. [ 483.308845][T30431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.849446][T30460] netlink: 'syz.0.10221': attribute type 12 has an invalid length. [ 484.068288][T30479] macvlan0: entered promiscuous mode [ 484.073835][T30479] macvlan0: entered allmulticast mode [ 484.079574][T30479] veth1_vlan: entered allmulticast mode [ 484.206303][T30499] loop3: detected capacity change from 0 to 764 [ 484.214680][T30499] rock: directory entry would overflow storage [ 484.214692][T30499] rock: sig=0x5245, size=8, remaining=5 [ 484.339267][T30512] validate_nla: 1 callbacks suppressed [ 484.339293][T30512] netlink: 'syz.5.10244': attribute type 12 has an invalid length. [ 484.339387][T30512] netlink: 'syz.5.10244': attribute type 29 has an invalid length. [ 484.563594][T30523] __nla_validate_parse: 12 callbacks suppressed [ 484.563643][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10245'. [ 484.888661][T30534] loop2: detected capacity change from 0 to 764 [ 484.895800][T30534] rock: directory entry would overflow storage [ 484.895810][T30534] rock: sig=0x5245, size=8, remaining=5 [ 484.940777][T30538] loop2: detected capacity change from 0 to 128 [ 484.979209][T30546] loop5: detected capacity change from 0 to 128 [ 485.012200][T30546] syz.5.10257: attempt to access beyond end of device [ 485.012200][T30546] loop5: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 485.027438][T30552] netlink: 'syz.2.10260': attribute type 12 has an invalid length. [ 485.035382][T30552] netlink: 'syz.2.10260': attribute type 29 has an invalid length. [ 485.043360][T30552] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10260'. [ 485.089073][T30560] bond3: option lacp_active: invalid value (9) [ 485.096380][T30560] bond3 (unregistering): Released all slaves [ 485.145007][T30572] loop3: detected capacity change from 0 to 128 [ 485.295174][ T29] audit: type=1326 audit(2000000369.810:70797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30595 comm="syz.5.10281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7359d8efc9 code=0x0 [ 485.514631][T30640] macvlan0: entered promiscuous mode [ 485.520131][T30640] macvlan0: entered allmulticast mode [ 485.544494][T30638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10301'. [ 485.805064][T30669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10316'. [ 485.818211][T30669] netlink: 'syz.0.10316': attribute type 4 has an invalid length. [ 485.980719][T30700] loop2: detected capacity change from 0 to 7 [ 486.240512][T30739] loop5: detected capacity change from 0 to 764 [ 486.270536][T30739] rock: directory entry would overflow storage [ 486.277176][T30739] rock: sig=0x5245, size=8, remaining=5 [ 486.297475][T30745] 9pnet_fd: Insufficient options for proto=fd [ 486.328460][T30742] loop2: detected capacity change from 0 to 7 [ 486.385585][ T29] audit: type=1326 audit(2000000370.900:70798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30748 comm="syz.5.10355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7359d8efc9 code=0x0 [ 486.394320][T30751] loop3: detected capacity change from 0 to 2048 [ 486.439000][T30755] loop2: detected capacity change from 0 to 7 [ 486.448329][T30751] loop3: p1 < > p3 [ 486.458593][T30751] loop3: p3 size 54016 extends beyond EOD, truncated [ 486.473927][ T29] audit: type=1400 audit(2000000370.990:70799): avc: denied { read write } for pid=30750 comm="syz.3.10356" name="loop3p3" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 486.498304][ T29] audit: type=1400 audit(2000000370.990:70800): avc: denied { open } for pid=30750 comm="syz.3.10356" path="/dev/loop3p3" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 486.556382][T30763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10360'. [ 487.007329][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10366'. [ 487.244777][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10378'. [ 487.309593][T30810] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10382'. [ 487.321926][T30804] loop5: detected capacity change from 0 to 8192 [ 487.443434][ T29] audit: type=1326 audit(2000000371.960:70801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30822 comm="syz.5.10388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7359d8efc9 code=0x0 [ 487.490095][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10385'. [ 487.681312][T30839] loop6: detected capacity change from 0 to 2048 [ 487.760568][T30839] Alternate GPT is invalid, using primary GPT. [ 487.767258][T30839] loop6: p2 p3 p7 [ 487.792124][T30839] loop2: detected capacity change from 0 to 7 [ 487.807049][T30839] loop2: [ 488.013459][T30854] netlink: 'syz.6.10397': attribute type 16 has an invalid length. [ 488.021485][T30854] netlink: 'syz.6.10397': attribute type 17 has an invalid length. [ 488.075968][T30854] net_ratelimit: 207 callbacks suppressed [ 488.076041][T30854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.191707][T30866] 9pnet_fd: Insufficient options for proto=fd [ 488.207089][T30868] loop2: detected capacity change from 0 to 7 [ 488.623570][ T8157] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.718015][ T8157] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.757910][T30881] chnl_net:caif_netlink_parms(): no params data found [ 488.790496][ T8157] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.843067][ T8157] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.916144][T30881] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.916174][T30881] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.916283][T30881] bridge_slave_0: entered allmulticast mode [ 488.916940][T30881] bridge_slave_0: entered promiscuous mode [ 488.918108][T30881] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.918138][T30881] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.920538][T30881] bridge_slave_1: entered allmulticast mode [ 488.922618][T30881] bridge_slave_1: entered promiscuous mode [ 489.030843][T30953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10434'. [ 489.093202][T30881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.115319][T30881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.162223][ T8157] bridge_slave_1: left allmulticast mode [ 489.162245][ T8157] bridge_slave_1: left promiscuous mode [ 489.162366][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.163362][ T8157] bridge_slave_0: left allmulticast mode [ 489.163378][ T8157] bridge_slave_0: left promiscuous mode [ 489.163461][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.236856][T30966] loop2: detected capacity change from 0 to 7 [ 489.436545][ T8157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.446592][ T8157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.456944][ T8157] bond0 (unregistering): Released all slaves [ 489.459822][ T8157] bond1 (unregistering): Released all slaves [ 489.488249][ T8157] bond2 (unregistering): Released all slaves [ 489.497463][ T8157] bond3 (unregistering): Released all slaves [ 489.529136][T30980] netlink: 'syz.0.10449': attribute type 16 has an invalid length. [ 489.537675][T30980] netlink: 'syz.0.10449': attribute type 17 has an invalid length. [ 489.618828][T30881] team0: Port device team_slave_0 added [ 489.642813][T30980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.660179][ T8157] hsr_slave_0: left promiscuous mode [ 489.671584][ T8157] hsr_slave_1: left promiscuous mode [ 489.680579][ T8157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.688065][ T8157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.713028][ T8157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.720517][ T8157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.747498][ T8157] veth1_macvtap: left promiscuous mode [ 489.753091][ T8157] veth0_macvtap: left promiscuous mode [ 489.758955][ T8157] veth1_vlan: left promiscuous mode [ 489.764219][ T8157] veth0_vlan: left promiscuous mode [ 489.812403][T31000] 9pnet_fd: Insufficient options for proto=fd [ 489.864943][ T8157] team0 (unregistering): Port device team_slave_1 removed [ 489.874761][ T8157] team0 (unregistering): Port device team_slave_0 removed [ 489.912802][T30881] team0: Port device team_slave_1 added [ 489.943839][T30881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.950865][T30881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.977020][T30881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.996230][ T29] audit: type=1326 audit(2000000374.520:70802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31005 comm="syz.0.10459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7194cbefc9 code=0x0 [ 490.024620][T30881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.031647][T30881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.058128][T30881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.120609][T30881] hsr_slave_0: entered promiscuous mode [ 490.126959][T30881] hsr_slave_1: entered promiscuous mode [ 490.132926][T30881] debugfs: 'hsr0' already exists in 'hsr' [ 490.138706][T30881] Cannot create hsr debugfs directory [ 490.263707][T31015] loop5: detected capacity change from 0 to 164 [ 490.271143][T31015] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 490.279940][T31015] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 490.503838][T31039] 9pnet_fd: Insufficient options for proto=fd [ 490.574996][T30881] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 490.591404][T30881] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 490.637443][T30881] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 490.649702][T30881] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 490.705111][T31058] loop5: detected capacity change from 0 to 2048 [ 490.742755][T31058] loop5: p1 < > p3 [ 490.747227][T31058] loop5: p3 size 54016 extends beyond EOD, truncated [ 490.760073][T30881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.779894][T30881] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.819383][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.826505][ T8158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.842428][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.849558][ T8158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.873077][T30881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.883593][T30881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.055143][T30881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.090258][T31093] loop3: detected capacity change from 0 to 164 [ 491.101201][ T29] audit: type=1326 audit(2000000375.620:70803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31095 comm="syz.5.10490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7359d8efc9 code=0x0 [ 491.125377][T31093] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 491.137789][T31093] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 491.294922][T30881] veth0_vlan: entered promiscuous mode [ 491.303440][T30881] veth1_vlan: entered promiscuous mode [ 491.304198][T31115] loop2: detected capacity change from 0 to 7 [ 491.322585][T30881] veth0_macvtap: entered promiscuous mode [ 491.330435][T30881] veth1_macvtap: entered promiscuous mode [ 491.342600][T30881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.351472][T30881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.367101][ T8163] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.380187][ T8163] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.388946][ T8163] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.400650][ T8163] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.493569][T31128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31128 comm=syz.6.10497 [ 491.591278][T31147] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 491.693938][T31158] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10511'. [ 492.086364][T31214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10534'. [ 492.110501][ T29] audit: type=1326 audit(2000000376.630:70804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31221 comm="syz.5.10537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7359d8efc9 code=0x0 [ 492.166632][T31229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10536'. [ 492.358034][T31260] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10552'. [ 492.368009][T31262] netlink: 'syz.2.10554': attribute type 16 has an invalid length. [ 492.376148][T31262] netlink: 'syz.2.10554': attribute type 17 has an invalid length. [ 492.405976][T31262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.580098][T31280] loop2: detected capacity change from 0 to 7 [ 492.645119][T31293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10568'. [ 492.704053][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10569'. [ 492.767694][ T29] audit: type=1400 audit(2000000377.290:70805): avc: denied { mount } for pid=31307 comm="syz.0.10575" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 492.770150][T31309] loop6: detected capacity change from 0 to 164 [ 492.802606][T31309] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 492.812212][T31309] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 492.824085][T31311] loop2: detected capacity change from 0 to 7 [ 493.124814][ T29] audit: type=1326 audit(2000000377.640:70806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31347 comm="syz.3.10591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x0 [ 493.159162][T31350] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.315373][ T8158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.352407][T31372] loop5: detected capacity change from 0 to 2048 [ 493.352577][T31317] chnl_net:caif_netlink_parms(): no params data found [ 493.379738][ T8158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.400915][T31376] netlink: 'syz.6.10603': attribute type 4 has an invalid length. [ 493.406057][T31372] loop5: p1 < > p3 [ 493.413788][T31372] loop5: p3 size 54016 extends beyond EOD, truncated [ 493.415873][T31376] netlink: 'syz.6.10603': attribute type 16 has an invalid length. [ 493.428648][T31376] netlink: 'syz.6.10603': attribute type 17 has an invalid length. [ 493.440434][ T8158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.516281][T31376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.546233][T31317] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.553351][T31317] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.569600][T31317] bridge_slave_0: entered allmulticast mode [ 493.576977][T31317] bridge_slave_0: entered promiscuous mode [ 493.588978][ T8158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.600626][T31395] loop2: detected capacity change from 0 to 7 [ 493.608771][T31317] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.616309][T31317] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.618514][T31397] 9pnet_fd: Insufficient options for proto=fd [ 493.634692][T31317] bridge_slave_1: entered allmulticast mode [ 493.644813][T31317] bridge_slave_1: entered promiscuous mode [ 493.676345][T31399] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.698854][T31403] loop2: detected capacity change from 0 to 2048 [ 493.711862][T31317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.737360][T31317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.751167][ T8158] bridge_slave_1: left allmulticast mode [ 493.757062][ T8158] bridge_slave_1: left promiscuous mode [ 493.762776][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.771586][T31403] loop2: p1 < > p3 [ 493.779561][T31403] loop2: p3 size 54016 extends beyond EOD, truncated [ 493.787097][ T8158] bridge_slave_0: left allmulticast mode [ 493.792790][ T8158] bridge_slave_0: left promiscuous mode [ 493.798722][T31413] loop6: detected capacity change from 0 to 2048 [ 493.798939][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.850295][T31413] Alternate GPT is invalid, using primary GPT. [ 493.856813][T31413] loop6: p2 p3 p7 [ 493.861685][T31419] loop2: detected capacity change from 0 to 7 [ 493.866866][T31421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10624'. [ 493.898784][T31413] loop2: detected capacity change from 0 to 7 [ 494.001167][T31438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10626'. [ 494.010590][T31435] loop3: detected capacity change from 0 to 2048 [ 494.019483][ T8158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.031862][ T8158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.041995][T31446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10635'. [ 494.052337][ T8158] bond0 (unregistering): Released all slaves [ 494.062489][ T8158] bond1 (unregistering): Released all slaves [ 494.069234][T31435] loop3: p1 < > p3 [ 494.073764][T31435] loop3: p3 size 54016 extends beyond EOD, truncated [ 494.084018][ T8158] bond2 (unregistering): Released all slaves [ 494.110789][T31317] team0: Port device team_slave_0 added [ 494.132346][T31317] team0: Port device team_slave_1 added [ 494.152283][ T8158] hsr_slave_0: left promiscuous mode [ 494.159287][ T8158] hsr_slave_1: left promiscuous mode [ 494.170524][ T8158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.178047][ T8158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.186505][ T8158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.193989][ T8158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.208797][ T8158] veth1_macvtap: left promiscuous mode [ 494.214529][ T8158] veth0_macvtap: left promiscuous mode [ 494.220186][ T8158] veth1_vlan: left promiscuous mode [ 494.226254][ T8158] veth0_vlan: left promiscuous mode [ 494.302638][ T8158] team0 (unregistering): Port device team_slave_1 removed [ 494.313571][ T8158] team0 (unregistering): Port device team_slave_0 removed [ 494.338423][T31475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10647'. [ 494.369995][T31317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.377093][T31317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.403018][T31317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.418891][T31466] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.447601][T31317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.454725][T31317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.477637][T31484] loop6: detected capacity change from 0 to 2048 [ 494.480992][T31317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.526068][T31484] loop6: p1 < > p3 [ 494.530623][T31484] loop6: p3 size 54016 extends beyond EOD, truncated [ 494.551376][T31489] loop3: detected capacity change from 0 to 164 [ 494.558499][T31489] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 494.575101][T31489] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 494.594627][T31317] hsr_slave_0: entered promiscuous mode [ 494.622119][T31317] hsr_slave_1: entered promiscuous mode [ 494.632916][T31317] debugfs: 'hsr0' already exists in 'hsr' [ 494.638738][T31317] Cannot create hsr debugfs directory [ 494.644758][T31493] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 494.689080][T31510] netlink: 'syz.5.10660': attribute type 16 has an invalid length. [ 494.697177][T31510] netlink: 'syz.5.10660': attribute type 17 has an invalid length. [ 494.717132][T31510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.880974][T31529] loop2: detected capacity change from 0 to 164 [ 494.888258][T31529] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 494.897250][T31529] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 495.109861][T31317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 495.138839][T31317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 495.147838][T31317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 495.161010][T31317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 495.233955][T31317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.250013][T31317] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.268165][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.275530][ T8163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.289832][ T2589] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.297248][ T2589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.384544][T31317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.458535][T31317] veth0_vlan: entered promiscuous mode [ 495.466621][T31317] veth1_vlan: entered promiscuous mode [ 495.484050][T31317] veth0_macvtap: entered promiscuous mode [ 495.495153][T31317] veth1_macvtap: entered promiscuous mode [ 495.507473][T31317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.519889][T31317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.528458][T31593] loop3: detected capacity change from 0 to 2048 [ 495.537440][ T2589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.546923][ T2589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.557578][ T2589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.571906][T31593] Alternate GPT is invalid, using primary GPT. [ 495.578333][T31593] loop3: p2 p3 p7 [ 495.582765][ T2589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.599643][T31593] loop2: detected capacity change from 0 to 7 [ 495.669588][T31605] netlink: 'syz.6.10693': attribute type 1 has an invalid length. [ 495.701849][T31605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.728084][T31605] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 495.920364][T31645] netlink: 'syz.0.10711': attribute type 1 has an invalid length. [ 495.955900][T31645] team0: Port device ip6erspan0 added [ 496.243433][T31683] netlink: 'syz.0.10727': attribute type 1 has an invalid length. [ 496.412425][ T1091] kernel write not supported for file bpf-prog (pid: 1091 comm: kworker/0:2) [ 496.589634][T31722] loop2: detected capacity change from 0 to 2048 [ 496.619084][T31722] Alternate GPT is invalid, using primary GPT. [ 496.619296][T31722] loop2: p2 p3 p7 [ 496.981092][T31745] loop6: detected capacity change from 0 to 2048 [ 497.000267][T31745] Alternate GPT is invalid, using primary GPT. [ 497.006792][T31745] loop6: p2 p3 p7 [ 497.015411][T31745] loop2: detected capacity change from 0 to 7 [ 497.021894][T31745] loop2: [ 497.112072][T31749] __nla_validate_parse: 6 callbacks suppressed [ 497.112087][T31749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10759'. [ 497.159802][T31755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 497.197228][T31760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10764'. [ 497.206497][T31760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10764'. [ 497.493421][T31795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10780'. [ 497.616614][T31807] loop2: detected capacity change from 0 to 2048 [ 497.626493][T31811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10787'. [ 497.656786][T31807] Alternate GPT is invalid, using primary GPT. [ 497.663188][T31807] loop2: p2 p3 p7 [ 497.702876][T31824] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 497.924169][T31870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10815'. [ 497.933309][T31870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10815'. [ 498.011694][T31879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10819'. [ 498.100840][T31894] loop3: detected capacity change from 0 to 2048 [ 498.168890][T31894] Alternate GPT is invalid, using primary GPT. [ 498.175607][T31894] loop3: p2 p3 p7 [ 498.183808][T31894] loop2: detected capacity change from 0 to 7 [ 498.190161][T31894] loop2: [ 498.279657][T31920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10837'. [ 498.288823][T31920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10837'. [ 498.781317][T31973] loop3: detected capacity change from 0 to 2048 [ 498.827868][T31973] Alternate GPT is invalid, using primary GPT. [ 498.834249][T31973] loop3: p2 p3 p7 [ 498.843294][T31973] loop2: detected capacity change from 0 to 7 [ 498.849595][T31973] loop2: [ 499.932966][T32083] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 499.935931][T32082] loop3: detected capacity change from 0 to 1024 [ 499.955881][T32082] EXT4-fs: Ignoring removed bh option [ 499.961360][T32082] EXT4-fs: inline encryption not supported [ 499.967659][T32082] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 499.978661][T32082] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 499.989682][T32082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.10908: lblock 2 mapped to illegal pblock 2 (length 1) [ 500.005420][T32082] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 500.023021][T32082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.10908: lblock 0 mapped to illegal pblock 48 (length 1) [ 500.037833][T32082] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 500.047360][T32082] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.10908: Failed to acquire dquot type 0 [ 500.059811][T32082] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 500.069549][T32082] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.10908: mark_inode_dirty error [ 500.081174][T32082] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 500.105499][T32082] EXT4-fs (loop3): 1 orphan inode deleted [ 500.113457][T32082] EXT4-fs mount: 44 callbacks suppressed [ 500.113474][T32082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.131959][ T8162] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 500.150066][ T8162] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 500.158570][ T8162] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 500.183072][T28650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.192395][T28650] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 500.206598][T28650] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 500.217207][T28650] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 500.352216][T32099] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 501.618046][T32140] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 501.702780][T32154] loop5: detected capacity change from 0 to 2048 [ 501.748546][T32154] Alternate GPT is invalid, using primary GPT. [ 501.755020][T32154] loop5: p2 p3 p7 [ 501.763481][T32154] loop2: detected capacity change from 0 to 7 [ 501.769832][T32154] loop2: [ 501.971618][T32170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 502.081474][T32180] loop2: detected capacity change from 0 to 7 [ 502.088330][T32180] loop2: [ 502.112254][T32182] pim6reg: entered allmulticast mode [ 502.119115][T32182] netlink: 'syz.0.10952': attribute type 10 has an invalid length. [ 502.136149][T32184] __nla_validate_parse: 9 callbacks suppressed [ 502.136164][T32184] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10953'. [ 502.211450][T32181] pim6reg: left allmulticast mode [ 502.292617][T32192] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 502.419600][T32188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10955'. [ 502.581833][T32196] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 503.171241][T32226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32226 comm=syz.0.10972 [ 503.348596][T32243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10980'. [ 503.373921][T32243] bridge0: entered promiscuous mode [ 503.385544][T32243] macsec0: entered promiscuous mode [ 503.397468][T32243] bridge0: port 3(macsec0) entered blocking state [ 503.404025][T32243] bridge0: port 3(macsec0) entered disabled state [ 503.424182][T32243] macsec0: entered allmulticast mode [ 503.429707][T32243] bridge0: entered allmulticast mode [ 503.448943][T32243] macsec0: left allmulticast mode [ 503.454101][T32243] bridge0: left allmulticast mode [ 503.471522][T32243] bridge0: left promiscuous mode [ 503.488319][T32252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10980'. [ 503.574765][ T29] audit: type=1326 audit(2000000388.090:70807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32269 comm="syz.3.10992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x0 [ 504.135298][T32283] chnl_net:caif_netlink_parms(): no params data found [ 504.160016][ T8163] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.189565][T32283] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.196706][T32283] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.203924][T32283] bridge_slave_0: entered allmulticast mode [ 504.210404][T32283] bridge_slave_0: entered promiscuous mode [ 504.219917][ T8163] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.231384][T32283] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.238523][T32283] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.245817][T32283] bridge_slave_1: entered allmulticast mode [ 504.252345][T32283] bridge_slave_1: entered promiscuous mode [ 504.270639][T32283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.281241][T32283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.298136][ T8163] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.315812][T32283] team0: Port device team_slave_0 added [ 504.322650][T32283] team0: Port device team_slave_1 added [ 504.339756][T32283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.346761][T32283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.372798][T32283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.386050][ T8163] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.402305][T32283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.409357][T32283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.435286][T32283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.468388][T32283] hsr_slave_0: entered promiscuous mode [ 504.474624][T32283] hsr_slave_1: entered promiscuous mode [ 504.480877][T32283] debugfs: 'hsr0' already exists in 'hsr' [ 504.486693][T32283] Cannot create hsr debugfs directory [ 504.512489][ T8163] bridge_slave_1: left allmulticast mode [ 504.518246][ T8163] bridge_slave_1: left promiscuous mode [ 504.523951][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.531988][ T8163] bridge_slave_0: left allmulticast mode [ 504.537704][ T8163] bridge_slave_0: left promiscuous mode [ 504.543456][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.601647][ T8163] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 504.673099][ T8163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.684005][ T8163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.696058][ T8163] bond0 (unregistering): Released all slaves [ 504.708326][ T8163] bond1 (unregistering): Released all slaves [ 504.717123][ T8163] bond2 (unregistering): Released all slaves [ 504.728222][ T8163] bond3 (unregistering): Released all slaves [ 504.758419][T32318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11005'. [ 504.786557][ T8163] hsr_slave_0: left promiscuous mode [ 504.800367][ T8163] hsr_slave_1: left promiscuous mode [ 504.806289][ T8163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.813707][ T8163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.823147][ T8163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.830622][ T8163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.841776][ T8163] veth1_macvtap: left promiscuous mode [ 504.848309][ T8163] veth0_macvtap: left promiscuous mode [ 504.854141][ T8163] veth1_vlan: left promiscuous mode [ 504.859925][ T8163] veth0_vlan: left promiscuous mode [ 504.979918][ T8163] team0 (unregistering): Port device team_slave_1 removed [ 505.006060][ T8163] team0 (unregistering): Port device team_slave_0 removed [ 505.075902][ T29] audit: type=1326 audit(2000000389.600:70808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.100500][ T29] audit: type=1326 audit(2000000389.600:70809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.130162][ T29] audit: type=1326 audit(2000000389.650:70810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.154094][ T29] audit: type=1326 audit(2000000389.650:70811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.177861][ T29] audit: type=1326 audit(2000000389.650:70812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.201859][ T29] audit: type=1326 audit(2000000389.650:70813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.226234][ T29] audit: type=1326 audit(2000000389.650:70814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.249955][ T29] audit: type=1326 audit(2000000389.650:70815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.273774][ T29] audit: type=1326 audit(2000000389.650:70816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.297450][ T29] audit: type=1326 audit(2000000389.650:70817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32329 comm="syz.6.11011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 505.423674][T32340] loop2: detected capacity change from 0 to 2048 [ 505.479992][T32340] Alternate GPT is invalid, using primary GPT. [ 505.486434][T32340] loop2: p2 p3 p7 [ 505.625154][T32283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 505.634260][T32283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 505.643429][T32283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 505.652702][T32283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 505.708699][T32283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.726982][T32283] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.736925][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.744025][ T8162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.754400][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.761585][ T8161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.790291][T32283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.800721][T32283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.887147][T32283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.933163][T32368] loop6: detected capacity change from 0 to 1024 [ 505.949077][T32368] EXT4-fs: Ignoring removed bh option [ 505.961773][T32368] EXT4-fs: inline encryption not supported [ 505.976341][T32368] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 505.999657][T32368] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 506.018983][T32368] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.11021: lblock 2 mapped to illegal pblock 2 (length 1) [ 506.030856][T32283] veth0_vlan: entered promiscuous mode [ 506.040988][T32368] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.11021: lblock 0 mapped to illegal pblock 48 (length 1) [ 506.041486][T32283] veth1_vlan: entered promiscuous mode [ 506.069560][T32368] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.11021: Failed to acquire dquot type 0 [ 506.082048][T32283] veth0_macvtap: entered promiscuous mode [ 506.089442][T32283] veth1_macvtap: entered promiscuous mode [ 506.095930][T32368] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 506.106317][T32368] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.11021: mark_inode_dirty error [ 506.122029][T32283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.129508][T32368] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 506.141407][T32283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.151239][ T8162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.162161][T32368] EXT4-fs (loop6): 1 orphan inode deleted [ 506.167920][ T8162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.167975][ T8162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.168656][ T8162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.195292][ T8160] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 506.195724][T32368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.220045][ T8160] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 0 [ 506.259286][T30881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.269040][T30881] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 506.289859][T30881] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 506.299913][T30881] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 506.426326][T32398] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 506.476521][T32404] loop6: detected capacity change from 0 to 2048 [ 506.493773][T32407] netlink: 'syz.2.11028': attribute type 16 has an invalid length. [ 506.501823][T32407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11028'. [ 506.528438][T32404] Alternate GPT is invalid, using primary GPT. [ 506.534894][T32404] loop6: p2 p3 p7 [ 506.547250][T32409] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11032'. [ 506.556499][T32409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11032'. [ 506.575699][T32404] loop2: detected capacity change from 0 to 7 [ 506.582100][T32404] loop2: [ 506.795270][T32436] loop6: detected capacity change from 0 to 512 [ 506.826517][T32436] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 506.857800][T32437] netlink: 'syz.5.11043': attribute type 16 has an invalid length. [ 506.863851][T32434] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.866013][T32437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11043'. [ 506.877169][T32434] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.986104][T32430] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11042'. [ 507.064605][T32454] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 507.260216][T32470] loop2: detected capacity change from 0 to 512 [ 507.291212][T32470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.307491][T32470] ext4 filesystem being mounted at /525/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.321497][T32470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11061'. [ 507.334122][T32470] bridge0: entered promiscuous mode [ 507.339641][T32470] macsec1: entered promiscuous mode [ 507.345398][T32470] bridge0: port 3(macsec1) entered blocking state [ 507.351948][T32470] bridge0: port 3(macsec1) entered disabled state [ 507.358718][T32470] macsec1: entered allmulticast mode [ 507.364096][T32470] bridge0: entered allmulticast mode [ 507.370059][T32470] macsec1: left allmulticast mode [ 507.375124][T32470] bridge0: left allmulticast mode [ 507.381281][T32470] bridge0: left promiscuous mode [ 507.479170][T26818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.498166][T32478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11062'. [ 507.711463][T32502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11073'. [ 507.765825][T32498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11069'. [ 507.784087][T32498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11069'. [ 507.904037][T32516] loop2: detected capacity change from 0 to 7 [ 507.911042][T32516] loop2: [ 508.228140][T32544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11092'. [ 508.668186][T32572] loop2: detected capacity change from 0 to 2048 [ 508.708539][T32572] Alternate GPT is invalid, using primary GPT. [ 508.714961][T32572] loop2: p2 p3 p7 [ 508.743147][T32574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11105'. [ 509.233446][T32603] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11118'. [ 509.484128][T32630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11130'. [ 509.493612][T32630] bridge: RTM_NEWNEIGH with invalid ether address [ 509.805055][T32647] loop6: detected capacity change from 0 to 512 [ 509.811997][T32647] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 510.125031][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 510.125046][ T29] audit: type=1326 audit(2000000394.640:70887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32666 comm="syz.5.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 510.155618][ T29] audit: type=1326 audit(2000000394.640:70888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32666 comm="syz.5.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 510.187083][ T29] audit: type=1326 audit(2000000394.680:70889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32666 comm="syz.5.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 510.210947][ T29] audit: type=1326 audit(2000000394.680:70890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32666 comm="syz.5.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 510.212555][T32671] netlink: 'syz.5.11149': attribute type 1 has an invalid length. [ 510.234894][ T29] audit: type=1326 audit(2000000394.680:70891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32666 comm="syz.5.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 510.315223][T32675] loop5: detected capacity change from 0 to 512 [ 510.323425][T32675] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 510.431094][ T29] audit: type=1326 audit(2000000394.950:70892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32678 comm="syz.0.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb404e5efc9 code=0x7ffc0000 [ 510.455022][ T29] audit: type=1326 audit(2000000394.950:70893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32678 comm="syz.0.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb404e5efc9 code=0x7ffc0000 [ 510.457783][T32695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11160'. [ 510.482129][ T29] audit: type=1326 audit(2000000395.000:70894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32678 comm="syz.0.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb404e5efc9 code=0x7ffc0000 [ 510.511858][ T29] audit: type=1326 audit(2000000395.000:70895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32678 comm="syz.0.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb404e5efc9 code=0x7ffc0000 [ 510.536617][ T29] audit: type=1326 audit(2000000395.000:70896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32678 comm="syz.0.11153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb404e5efc9 code=0x7ffc0000 [ 510.581929][T32701] netlink: 'syz.3.11162': attribute type 1 has an invalid length. [ 510.596448][T32701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.745312][T32720] loop3: detected capacity change from 0 to 2048 [ 510.751796][T32724] loop6: detected capacity change from 0 to 256 [ 510.772049][T32724] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152) [ 510.778156][T32720] Alternate GPT is invalid, using primary GPT. [ 510.779966][T32724] FAT-fs (loop6): Filesystem has been set read-only [ 510.786438][T32720] loop3: p2 p3 p7 [ 510.792919][T32724] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152) [ 510.810476][T32720] loop2: detected capacity change from 0 to 7 [ 510.817482][T32720] loop2: [ 512.016142][ T329] loop6: detected capacity change from 0 to 256 [ 512.769592][ T387] loop3: detected capacity change from 0 to 2048 [ 512.827619][ T387] Alternate GPT is invalid, using primary GPT. [ 512.834408][ T387] loop3: p2 p3 p7 [ 512.844406][ T387] loop2: detected capacity change from 0 to 7 [ 512.850987][ T387] loop2: [ 513.093338][ T421] __nla_validate_parse: 4 callbacks suppressed [ 513.093354][ T421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11236'. [ 513.094299][ T422] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 513.119685][ T410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11236'. [ 513.261929][ T435] netlink: 'syz.6.11249': attribute type 1 has an invalid length. [ 513.323710][ T439] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11249'. [ 513.346212][ T435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.772007][ T466] loop6: detected capacity change from 0 to 256 [ 513.794752][ T466] FAT-fs (loop6): error, clusters badly computed (0 != 128) [ 513.802382][ T466] FAT-fs (loop6): Filesystem has been set read-only [ 513.825542][ T466] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 513.908659][ T476] loop5: detected capacity change from 0 to 256 [ 513.973002][ T479] loop6: detected capacity change from 0 to 512 [ 513.979859][ T479] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 514.077621][ T492] netlink: 'syz.0.11273': attribute type 1 has an invalid length. [ 514.093424][ T492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.104092][ T492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11273'. [ 514.116825][ T503] loop6: detected capacity change from 0 to 256 [ 514.137805][ T503] FAT-fs (loop6): error, clusters badly computed (0 != 128) [ 514.145155][ T503] FAT-fs (loop6): Filesystem has been set read-only [ 514.160963][ T503] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 514.394521][ T540] loop6: detected capacity change from 0 to 2048 [ 514.458454][ T540] Alternate GPT is invalid, using primary GPT. [ 514.465128][ T540] loop6: p2 p3 p7 [ 514.473370][ T540] loop2: detected capacity change from 0 to 7 [ 514.479885][ T540] loop2: [ 514.641552][ T559] loop2: detected capacity change from 0 to 1024 [ 514.648519][ T559] EXT4-fs: Ignoring removed bh option [ 514.653936][ T559] EXT4-fs: inline encryption not supported [ 514.660235][ T559] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 514.671279][ T559] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 514.681155][ T559] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.11301: lblock 2 mapped to illegal pblock 2 (length 1) [ 514.695709][ T559] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.11301: lblock 0 mapped to illegal pblock 48 (length 1) [ 514.710226][ T559] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.11301: Failed to acquire dquot type 0 [ 514.721847][ T559] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 514.731457][ T559] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.11301: mark_inode_dirty error [ 514.743056][ T559] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 514.753433][ T559] EXT4-fs (loop2): 1 orphan inode deleted [ 514.761830][ T559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.774422][ T8161] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 514.789073][ T8161] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 0 [ 514.801675][T26818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.811032][T26818] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 514.824062][T26818] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 514.833772][T26818] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 514.859929][ T563] loop2: detected capacity change from 0 to 512 [ 514.877327][ T563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.890065][ T563] ext4 filesystem being mounted at /572/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.903187][ T563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11302'. [ 514.915327][ T563] bridge0: entered promiscuous mode [ 514.920840][ T563] macsec1: entered promiscuous mode [ 514.926609][ T563] bridge0: port 3(macsec1) entered blocking state [ 514.933091][ T563] bridge0: port 3(macsec1) entered disabled state [ 514.939976][ T563] macsec1: entered allmulticast mode [ 514.945287][ T563] bridge0: entered allmulticast mode [ 514.951829][ T563] macsec1: left allmulticast mode [ 514.957087][ T563] bridge0: left allmulticast mode [ 514.962954][ T563] bridge0: left promiscuous mode [ 515.108986][T26818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.149682][ T592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=592 comm=syz.0.11314 [ 515.172046][ T596] loop2: detected capacity change from 0 to 256 [ 515.284889][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 515.284906][ T29] audit: type=1326 audit(2000000399.800:70989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=615 comm="syz.5.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 515.291450][ T618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11327'. [ 515.340092][ T29] audit: type=1326 audit(2000000399.840:70990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=615 comm="syz.5.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 515.363689][ T29] audit: type=1326 audit(2000000399.840:70991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=615 comm="syz.5.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 515.387275][ T29] audit: type=1326 audit(2000000399.840:70992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=615 comm="syz.5.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 515.433445][ T628] loop5: detected capacity change from 0 to 1024 [ 515.440936][ T628] EXT4-fs: Ignoring removed bh option [ 515.446643][ T628] EXT4-fs: inline encryption not supported [ 515.455339][ T628] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 515.467868][ T628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 515.470009][ T636] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11335'. [ 515.489239][ T630] loop2: detected capacity change from 0 to 512 [ 515.496304][ T630] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 515.502707][ T628] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.11332: lblock 2 mapped to illegal pblock 2 (length 1) [ 515.522344][ T628] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 515.531430][ T628] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.11332: lblock 0 mapped to illegal pblock 48 (length 1) [ 515.551286][ T628] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 515.560252][ T628] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.11332: Failed to acquire dquot type 0 [ 515.572951][ T628] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 515.583404][ T628] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.11332: mark_inode_dirty error [ 515.596062][ T628] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 515.606395][ T628] EXT4-fs (loop5): 1 orphan inode deleted [ 515.613116][ T628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.625782][ T8157] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 515.641848][ T8157] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 515.650353][ T8157] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:26: Failed to release dquot type 0 [ 515.679386][T32283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.689342][T32283] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 515.702798][T32283] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 515.712957][T32283] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 515.765290][ T661] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11346'. [ 515.855929][ T665] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 516.031217][ T677] loop5: detected capacity change from 0 to 512 [ 516.047392][ T677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.060553][ T677] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.073585][ T677] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11354'. [ 516.087885][ T677] bridge0: entered promiscuous mode [ 516.093340][ T677] macsec1: entered promiscuous mode [ 516.099448][ T677] bridge0: port 3(macsec1) entered blocking state [ 516.106114][ T677] bridge0: port 3(macsec1) entered disabled state [ 516.113110][ T677] macsec1: entered allmulticast mode [ 516.118498][ T677] bridge0: entered allmulticast mode [ 516.124680][ T677] macsec1: left allmulticast mode [ 516.129781][ T677] bridge0: left allmulticast mode [ 516.136835][ T677] bridge0: left promiscuous mode [ 516.164352][ T687] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11357'. [ 516.232574][T32283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.349843][ T702] loop6: detected capacity change from 0 to 256 [ 516.372694][ T29] audit: type=1326 audit(2000000400.890:70993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=692 comm="syz.5.11360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 516.396381][ T29] audit: type=1326 audit(2000000400.890:70994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=692 comm="syz.5.11360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 516.420567][ T29] audit: type=1326 audit(2000000400.920:70995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=692 comm="syz.5.11360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 516.463124][ T709] netlink: 'syz.2.11367': attribute type 1 has an invalid length. [ 516.478855][ T709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.954339][ T752] loop3: detected capacity change from 0 to 2048 [ 517.001327][ T752] Alternate GPT is invalid, using primary GPT. [ 517.007875][ T752] loop3: p2 p3 p7 [ 517.016795][ T752] loop2: detected capacity change from 0 to 7 [ 517.023603][ T752] loop2: [ 517.084080][ T759] loop3: detected capacity change from 0 to 512 [ 517.091009][ T759] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 517.202999][ T774] loop5: detected capacity change from 0 to 512 [ 517.218674][ T774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.231517][ T774] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.247903][ T774] bridge0: entered promiscuous mode [ 517.253320][ T774] macsec1: entered promiscuous mode [ 517.259554][ T774] bridge0: port 3(macsec1) entered blocking state [ 517.266231][ T774] bridge0: port 3(macsec1) entered disabled state [ 517.273238][ T774] macsec1: entered allmulticast mode [ 517.273813][ T776] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 517.278598][ T774] bridge0: entered allmulticast mode [ 517.292623][ T774] macsec1: left allmulticast mode [ 517.297759][ T774] bridge0: left allmulticast mode [ 517.303721][ T774] bridge0: left promiscuous mode [ 517.363460][ T781] loop6: detected capacity change from 0 to 2048 [ 517.395097][T32283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.414916][ T781] Alternate GPT is invalid, using primary GPT. [ 517.421808][ T781] loop6: p2 p3 p7 [ 517.432201][ T781] loop2: detected capacity change from 0 to 7 [ 517.439251][ T781] loop2: [ 517.515416][ T793] loop2: detected capacity change from 0 to 7 [ 517.625008][ T812] loop5: detected capacity change from 0 to 2048 [ 517.637768][ T818] loop2: detected capacity change from 0 to 256 [ 517.671473][ T822] loop2: detected capacity change from 0 to 1024 [ 517.678316][ T822] EXT4-fs: Ignoring removed bh option [ 517.680529][ T812] Alternate GPT is invalid, using primary GPT. [ 517.683826][ T822] EXT4-fs: inline encryption not supported [ 517.690187][ T812] loop5: p2 p3 p7 [ 517.700171][ T822] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 517.711425][ T822] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 517.722064][ T822] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.11418: lblock 2 mapped to illegal pblock 2 (length 1) [ 517.736456][ T822] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.11418: lblock 0 mapped to illegal pblock 48 (length 1) [ 517.751273][ T822] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.11418: Failed to acquire dquot type 0 [ 517.763269][ T822] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 517.772991][ T822] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.11418: mark_inode_dirty error [ 517.784538][ T822] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 517.794799][ T822] EXT4-fs (loop2): 1 orphan inode deleted [ 517.801207][ T822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.814107][ T8157] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 517.828524][ T8157] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:26: Failed to release dquot type 0 [ 517.849218][T26818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.858719][T26818] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 517.871858][T26818] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 517.883571][T26818] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 517.960613][ T839] loop2: detected capacity change from 0 to 256 [ 517.980542][ T839] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 517.988517][ T839] FAT-fs (loop2): Filesystem has been set read-only [ 517.995301][ T839] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 518.178663][ T842] chnl_net:caif_netlink_parms(): no params data found [ 518.217561][ T842] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.224653][ T842] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.232055][ T842] bridge_slave_0: entered allmulticast mode [ 518.238639][ T842] bridge_slave_0: entered promiscuous mode [ 518.245278][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.252396][ T842] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.259564][ T842] bridge_slave_1: entered allmulticast mode [ 518.266097][ T842] bridge_slave_1: entered promiscuous mode [ 518.284956][ T842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.295357][ T842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.315168][ T842] team0: Port device team_slave_0 added [ 518.321761][ T842] team0: Port device team_slave_1 added [ 518.338694][ T857] __nla_validate_parse: 3 callbacks suppressed [ 518.338711][ T857] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11427'. [ 518.354289][ T842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.361292][ T842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.387337][ T842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.398726][ T842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.405717][ T842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.431668][ T842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.458250][ T842] hsr_slave_0: entered promiscuous mode [ 518.464286][ T842] hsr_slave_1: entered promiscuous mode [ 518.530949][ T842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.583133][ T842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.638853][ T842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.653395][ T863] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11430'. [ 518.679193][ T842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.741783][ T842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 518.750502][ T842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.758973][ T842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.767690][ T842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.811045][ T842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.823143][ T842] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.838704][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.845930][ T8160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.854934][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.862061][ T8160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.937867][ T842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.951700][ T896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11440'. [ 518.964581][ T896] bridge0: entered promiscuous mode [ 518.970219][ T896] macsec0: entered promiscuous mode [ 518.976874][ T896] bridge0: port 3(macsec0) entered blocking state [ 518.983386][ T896] bridge0: port 3(macsec0) entered disabled state [ 518.990048][ T896] macsec0: entered allmulticast mode [ 518.995549][ T896] bridge0: entered allmulticast mode [ 519.001235][ T896] macsec0: left allmulticast mode [ 519.006393][ T896] bridge0: left allmulticast mode [ 519.012237][ T896] bridge0: left promiscuous mode [ 519.019901][ T899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11440'. [ 519.061491][ T842] veth0_vlan: entered promiscuous mode [ 519.069825][ T842] veth1_vlan: entered promiscuous mode [ 519.087941][ T842] veth0_macvtap: entered promiscuous mode [ 519.097280][ T842] veth1_macvtap: entered promiscuous mode [ 519.110103][ T842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.121533][ T842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.133024][ T8163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.144505][ T8163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.153881][ T8163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.165189][ T8163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.346961][ T931] loop2: detected capacity change from 0 to 7 [ 519.391193][ T941] netlink: 'syz.2.11455': attribute type 1 has an invalid length. [ 519.559264][ T952] loop2: detected capacity change from 0 to 2048 [ 519.588211][ T937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11453'. [ 519.618681][ T952] Alternate GPT is invalid, using primary GPT. [ 519.625117][ T952] loop2: p2 p3 p7 [ 520.206470][ T988] loop6: detected capacity change from 0 to 256 [ 520.264508][ T995] pim6reg: entered allmulticast mode [ 520.272034][ T995] netlink: 'syz.0.11478': attribute type 10 has an invalid length. [ 520.282236][ T994] pim6reg: left allmulticast mode [ 520.303294][ T999] netlink: 'syz.6.11480': attribute type 1 has an invalid length. [ 520.316775][ T999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.462167][ T1024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11492'. [ 520.999004][ T3594] kernel read not supported for file [fscontext] (pid: 3594 comm: kworker/1:7) [ 521.000118][ T1061] netlink: 'syz.2.11509': attribute type 1 has an invalid length. [ 521.017387][ T1061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11509'. [ 521.287119][ T1084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11520'. [ 521.316904][ T1086] loop6: detected capacity change from 0 to 512 [ 521.323906][ T1086] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 521.351619][ T1088] netlink: 'syz.6.11522': attribute type 1 has an invalid length. [ 521.365060][ T1088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.374483][ T1088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11522'. [ 521.514811][ T1108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11531'. [ 521.562335][ T1106] loop6: detected capacity change from 0 to 512 [ 521.602148][ T1106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.646228][ T1106] ext4 filesystem being mounted at /237/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.691495][ T1106] bridge0: entered promiscuous mode [ 521.707582][ T1106] macsec1: entered promiscuous mode [ 521.714514][ T1106] bridge0: port 3(macsec1) entered blocking state [ 521.721275][ T1106] bridge0: port 3(macsec1) entered disabled state [ 521.728814][ T1106] macsec1: entered allmulticast mode [ 521.734305][ T1106] bridge0: entered allmulticast mode [ 521.742842][ T1106] macsec1: left allmulticast mode [ 521.748052][ T1106] bridge0: left allmulticast mode [ 521.749213][ T1136] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 521.762610][ T1106] bridge0: left promiscuous mode [ 521.762865][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 521.762981][ T29] audit: type=1326 audit(2000000406.290:71138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1134 comm="syz.2.11541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 521.797425][ T29] audit: type=1326 audit(2000000406.290:71139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1134 comm="syz.2.11541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 521.851638][ T29] audit: type=1326 audit(2000000406.340:71140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1134 comm="syz.2.11541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 521.875357][ T29] audit: type=1326 audit(2000000406.340:71141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1134 comm="syz.2.11541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 521.899141][ T29] audit: type=1326 audit(2000000406.340:71142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1134 comm="syz.2.11541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 521.935766][T30881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.042821][ T1154] loop2: detected capacity change from 0 to 764 [ 522.141739][ T1165] loop2: detected capacity change from 0 to 1024 [ 522.149043][ T1165] EXT4-fs: Ignoring removed bh option [ 522.154579][ T1165] EXT4-fs: inline encryption not supported [ 522.162040][ T1165] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 522.173980][ T1165] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 522.184263][ T1165] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.11553: lblock 2 mapped to illegal pblock 2 (length 1) [ 522.199096][ T1165] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 522.207631][ T1165] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.11553: lblock 0 mapped to illegal pblock 48 (length 1) [ 522.222322][ T1165] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 522.232018][ T1165] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.11553: Failed to acquire dquot type 0 [ 522.244049][ T1165] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 522.253753][ T1165] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.11553: mark_inode_dirty error [ 522.266071][ T1165] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 522.276833][ T1165] EXT4-fs (loop2): 1 orphan inode deleted [ 522.283253][ T1165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.296049][ T2589] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 522.310876][ T2589] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 522.319712][ T2589] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 522.334746][ T842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.344434][ T842] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 522.357988][ T842] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 522.368016][ T842] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 522.391534][ T29] audit: type=1326 audit(2000000406.910:71143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.2.11554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 522.415689][ T29] audit: type=1326 audit(2000000406.910:71144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.2.11554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 522.537299][ T1180] loop3: detected capacity change from 0 to 512 [ 522.545538][ T1180] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 522.616243][ T1189] loop3: detected capacity change from 0 to 764 [ 522.647338][ T1191] loop2: detected capacity change from 0 to 512 [ 522.669797][ T1191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.694408][ T1191] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.711049][ T1191] bridge0: entered promiscuous mode [ 522.717018][ T1191] macsec1: entered promiscuous mode [ 522.723450][ T1191] bridge0: port 3(macsec1) entered blocking state [ 522.730274][ T1191] bridge0: port 3(macsec1) entered disabled state [ 522.738241][ T1191] macsec1: entered allmulticast mode [ 522.743598][ T1191] bridge0: entered allmulticast mode [ 522.750274][ T1191] macsec1: left allmulticast mode [ 522.755702][ T1191] bridge0: left allmulticast mode [ 522.762376][ T1191] bridge0: left promiscuous mode [ 522.811955][ T1212] loop3: detected capacity change from 0 to 512 [ 522.819177][ T1212] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 522.870959][ T842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.928769][ T1233] loop3: detected capacity change from 0 to 764 [ 523.025425][ T1247] loop6: detected capacity change from 0 to 512 [ 523.038405][ T1247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.051395][ T1247] ext4 filesystem being mounted at /247/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.078581][ T1247] bridge0: entered promiscuous mode [ 523.084105][ T1247] macsec1: entered promiscuous mode [ 523.090727][ T1247] bridge0: port 3(macsec1) entered blocking state [ 523.097407][ T1247] bridge0: port 3(macsec1) entered disabled state [ 523.104293][ T1247] macsec1: entered allmulticast mode [ 523.109921][ T1247] bridge0: entered allmulticast mode [ 523.116881][ T1247] macsec1: left allmulticast mode [ 523.122024][ T1247] bridge0: left allmulticast mode [ 523.127744][ T1247] bridge0: left promiscuous mode [ 523.202968][T30881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.267040][ T1258] netlink: 'syz.6.11593': attribute type 1 has an invalid length. [ 523.284454][ T1258] 8021q: adding VLAN 0 to HW filter on device bond5 [ 523.431133][ T1270] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 523.591423][ T1290] loop3: detected capacity change from 0 to 2048 [ 523.651795][ T1290] Alternate GPT is invalid, using primary GPT. [ 523.658399][ T1290] loop3: p2 p3 p7 [ 523.666583][ T1290] loop2: detected capacity change from 0 to 7 [ 523.852014][ T1312] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 524.006463][ T1329] loop2: detected capacity change from 0 to 512 [ 524.017356][ T1329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.030121][ T1329] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.043518][ T1329] __nla_validate_parse: 7 callbacks suppressed [ 524.043533][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11619'. [ 524.061840][ T1329] bridge0: entered promiscuous mode [ 524.067176][ T1329] macsec1: entered promiscuous mode [ 524.073457][ T1329] bridge0: port 3(macsec1) entered blocking state [ 524.080134][ T1329] bridge0: port 3(macsec1) entered disabled state [ 524.086825][ T1329] macsec1: entered allmulticast mode [ 524.092167][ T1329] bridge0: entered allmulticast mode [ 524.097940][ T1329] macsec1: left allmulticast mode [ 524.103032][ T1329] bridge0: left allmulticast mode [ 524.108658][ T1329] bridge0: left promiscuous mode [ 524.206923][ T842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.294093][ T1350] netlink: 'syz.2.11628': attribute type 1 has an invalid length. [ 524.307436][ T1350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.316567][ T1350] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11628'. [ 524.510402][ T1357] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 524.628802][ T1365] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11635'. [ 524.724440][ T1380] loop6: detected capacity change from 0 to 764 [ 524.798793][ T1395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11648'. [ 524.808547][ T1397] pim6reg: entered allmulticast mode [ 524.815455][ T1397] netlink: 'syz.0.11650': attribute type 10 has an invalid length. [ 524.823721][ T1396] pim6reg: left allmulticast mode [ 524.899047][ T1403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11653'. [ 525.094732][ T1431] loop2: detected capacity change from 0 to 7 [ 525.194139][ T1443] loop3: detected capacity change from 0 to 512 [ 525.216526][ T1425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11661'. [ 525.227466][ T1425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11661'. [ 525.246227][ T1443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.262198][ T1454] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11675'. [ 525.265620][ T1443] ext4 filesystem being mounted at /382/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.288973][ T1443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11673'. [ 525.301963][ T1443] bridge0: entered promiscuous mode [ 525.307334][ T1443] macsec1: entered promiscuous mode [ 525.313683][ T1443] bridge0: port 3(macsec1) entered blocking state [ 525.320278][ T1443] bridge0: port 3(macsec1) entered disabled state [ 525.327228][ T1443] macsec1: entered allmulticast mode [ 525.332833][ T1443] bridge0: entered allmulticast mode [ 525.339146][ T1443] macsec1: left allmulticast mode [ 525.344221][ T1443] bridge0: left allmulticast mode [ 525.350285][ T1443] bridge0: left promiscuous mode [ 525.359520][ T1459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11673'. [ 525.408847][ T1463] loop2: detected capacity change from 0 to 764 [ 525.453838][T28650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.633661][ T1482] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 525.809732][ T1498] netlink: 'syz.6.11696': attribute type 1 has an invalid length. [ 525.839701][ T1498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 526.485191][ T1588] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 526.827766][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 526.827784][ T29] audit: type=1326 audit(2000000411.350:71201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.5.11741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 526.827895][ T29] audit: type=1326 audit(2000000411.350:71202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.5.11741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 526.828340][ T29] audit: type=1326 audit(2000000411.350:71203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz.5.11741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb715fefc9 code=0x7ffc0000 [ 526.901961][ T1616] loop5: detected capacity change from 0 to 512 [ 526.905383][ T1614] netlink: 'syz.6.11745': attribute type 12 has an invalid length. [ 526.941588][ T1614] netlink: 'syz.6.11745': attribute type 29 has an invalid length. [ 526.955148][ T1616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.955238][ T1616] ext4 filesystem being mounted at /115/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.961622][ T1616] bridge0: entered promiscuous mode [ 526.961672][ T1616] macsec1: entered promiscuous mode [ 526.962023][ T1616] bridge0: port 3(macsec1) entered blocking state [ 526.962061][ T1616] bridge0: port 3(macsec1) entered disabled state [ 526.962292][ T1616] macsec1: entered allmulticast mode [ 526.962322][ T1616] bridge0: entered allmulticast mode [ 526.965513][ T1616] macsec1: left allmulticast mode [ 526.990606][ T1620] loop2: detected capacity change from 0 to 7 [ 526.990810][ T1616] bridge0: left allmulticast mode [ 527.047019][ T1616] bridge0: left promiscuous mode [ 527.112538][T32283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.239101][ T29] audit: type=1326 audit(2000000411.760:71204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.6.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 527.239138][ T29] audit: type=1326 audit(2000000411.760:71205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.6.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 527.239211][ T29] audit: type=1326 audit(2000000411.760:71206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.6.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 527.239953][ T29] audit: type=1326 audit(2000000411.760:71207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.6.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 527.334165][ T29] audit: type=1326 audit(2000000411.760:71208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.6.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 527.398132][ T29] audit: type=1326 audit(2000000411.790:71209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.6.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 527.421902][ T29] audit: type=1326 audit(2000000411.790:71210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.6.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 527.633832][ T1675] loop2: detected capacity change from 0 to 7 [ 527.985641][ T1685] loop6: detected capacity change from 0 to 512 [ 527.987246][ T1685] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 528.516651][ T1707] bridge0: entered promiscuous mode [ 528.522181][ T1707] macsec0: entered promiscuous mode [ 528.528718][ T1707] bridge0: port 3(macsec0) entered blocking state [ 528.535187][ T1707] bridge0: port 3(macsec0) entered disabled state [ 528.541984][ T1707] macsec0: entered allmulticast mode [ 528.547370][ T1707] bridge0: entered allmulticast mode [ 528.555608][ T1707] macsec0: left allmulticast mode [ 528.560796][ T1707] bridge0: left allmulticast mode [ 528.586609][ T1707] bridge0: left promiscuous mode [ 528.672910][ T1723] netlink: 'syz.0.11790': attribute type 1 has an invalid length. [ 528.691380][ T1723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.895996][ T1753] loop2: detected capacity change from 0 to 7 [ 528.923701][ T1755] pim6reg: entered allmulticast mode [ 528.930740][ T1755] netlink: 'syz.6.11804': attribute type 10 has an invalid length. [ 529.009295][ T1754] pim6reg: left allmulticast mode [ 529.120357][ T1780] loop2: detected capacity change from 0 to 7 [ 529.151895][ T1784] loop6: detected capacity change from 0 to 512 [ 529.158980][ T1784] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 529.496499][ T1813] __nla_validate_parse: 22 callbacks suppressed [ 529.496513][ T1813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11831'. [ 529.573184][ T1818] loop3: detected capacity change from 0 to 512 [ 529.580310][ T1818] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 529.647465][ T1825] loop3: detected capacity change from 0 to 512 [ 529.657476][ T1825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.670674][ T1825] ext4 filesystem being mounted at /408/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.683743][ T1825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11836'. [ 529.696697][ T1825] bridge0: entered promiscuous mode [ 529.702192][ T1825] macsec1: entered promiscuous mode [ 529.708692][ T1825] bridge0: port 3(macsec1) entered blocking state [ 529.715284][ T1825] bridge0: port 3(macsec1) entered disabled state [ 529.722549][ T1825] macsec1: entered allmulticast mode [ 529.728053][ T1825] bridge0: entered allmulticast mode [ 529.734201][ T1825] macsec1: left allmulticast mode [ 529.739440][ T1825] bridge0: left allmulticast mode [ 529.745351][ T1825] bridge0: left promiscuous mode [ 529.753718][ T1829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11836'. [ 529.789537][T28650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.098303][ T1849] loop2: detected capacity change from 0 to 7 [ 530.138173][ T1853] pim6reg: entered allmulticast mode [ 530.141477][ T1853] netlink: 'syz.2.11847': attribute type 10 has an invalid length. [ 530.260630][ T1852] pim6reg: left allmulticast mode [ 530.897472][ T1888] loop2: detected capacity change from 0 to 256 [ 531.176581][ T1916] bridge_slave_0: default FDB implementation only supports local addresses [ 531.194391][ T1916] bridge_slave_0: default FDB implementation only supports local addresses [ 531.444707][ T1946] pim6reg: entered allmulticast mode [ 531.451669][ T1946] netlink: 'syz.0.11890': attribute type 10 has an invalid length. [ 531.460888][ T1945] pim6reg: left allmulticast mode [ 531.981167][ T1968] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.990794][ T1969] netlink: 'syz.2.11901': attribute type 16 has an invalid length. [ 531.992613][ T1968] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.998804][ T1969] netlink: 'syz.2.11901': attribute type 17 has an invalid length. [ 532.094810][ T1969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.402476][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 532.402495][ T29] audit: type=1326 audit(2000000416.920:71278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.433723][ T29] audit: type=1326 audit(2000000416.920:71279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.458204][ T29] audit: type=1326 audit(2000000416.920:71280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.482219][ T29] audit: type=1326 audit(2000000416.920:71281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.506359][ T29] audit: type=1326 audit(2000000416.920:71282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.530358][ T29] audit: type=1326 audit(2000000416.920:71283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.555471][ T29] audit: type=1326 audit(2000000416.920:71284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.579809][ T29] audit: type=1326 audit(2000000416.920:71285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.604136][ T29] audit: type=1326 audit(2000000416.920:71286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.628428][ T29] audit: type=1326 audit(2000000416.920:71287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.6.11904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x7ffc0000 [ 532.970518][ T2006] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11916'. [ 533.120150][ T2028] loop2: detected capacity change from 0 to 1024 [ 533.126893][ T2028] EXT4-fs: Ignoring removed bh option [ 533.132368][ T2028] EXT4-fs: inline encryption not supported [ 533.138684][ T2028] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 533.150366][ T2028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 533.159620][ T2028] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.11927: lblock 2 mapped to illegal pblock 2 (length 1) [ 533.174803][ T2028] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.11927: lblock 0 mapped to illegal pblock 48 (length 1) [ 533.175558][ T2034] netlink: 'syz.6.11929': attribute type 5 has an invalid length. [ 533.196032][ T2028] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.11927: Failed to acquire dquot type 0 [ 533.197154][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11929'. [ 533.218198][ T2028] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 533.239148][ T2028] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.11927: mark_inode_dirty error [ 533.252941][ T2028] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 533.263337][ T2028] EXT4-fs (loop2): 1 orphan inode deleted [ 533.264409][ T2038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11931'. [ 533.269623][ T2028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.279154][ T8162] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 533.325569][ T8162] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 533.346525][ T842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.356208][ T842] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 533.375609][ T842] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 533.395419][ T842] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 533.486209][ T2063] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11943'. [ 533.604116][ T2085] bridge_slave_0: default FDB implementation only supports local addresses [ 533.644562][ T2091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11956'. [ 533.698399][ T2100] loop6: detected capacity change from 0 to 512 [ 533.705877][ T2100] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 533.755292][ T2111] loop6: detected capacity change from 0 to 128 [ 533.803602][ T2115] bridge_slave_0: default FDB implementation only supports local addresses [ 533.853782][ T2123] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11971'. [ 533.932877][ T2141] bridge_slave_0: default FDB implementation only supports local addresses [ 534.012360][ T2153] loop5: detected capacity change from 0 to 512 [ 534.035781][ T2153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.049286][ T2153] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.063296][ T2153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11986'. [ 534.077433][ T2153] bridge0: entered promiscuous mode [ 534.083517][ T2153] macsec1: entered promiscuous mode [ 534.090252][ T2153] bridge0: port 3(macsec1) entered blocking state [ 534.096944][ T2153] bridge0: port 3(macsec1) entered disabled state [ 534.103829][ T2153] macsec1: entered allmulticast mode [ 534.109245][ T2153] bridge0: entered allmulticast mode [ 534.114936][ T2153] macsec1: left allmulticast mode [ 534.120059][ T2153] bridge0: left allmulticast mode [ 534.127031][ T2153] bridge0: left promiscuous mode [ 534.149469][ T2166] bridge_slave_0: default FDB implementation only supports local addresses [ 534.196735][T32283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.282071][ T2180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.289357][ T2180] IPv6: NLM_F_CREATE should be set when creating new route [ 534.357977][ T2192] 9pnet_fd: Insufficient options for proto=fd [ 534.521543][ T2206] pim6reg: entered allmulticast mode [ 534.528189][ T2206] netlink: 'syz.2.12009': attribute type 10 has an invalid length. [ 534.650933][ T2216] 9pnet_fd: Insufficient options for proto=fd [ 535.164594][ T2232] bridge_slave_0: default FDB implementation only supports local addresses [ 535.190860][ T2234] loop5: detected capacity change from 0 to 512 [ 535.217746][ T2234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.238096][ T2234] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.259633][ T2234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12021'. [ 535.264551][ T2245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2245 comm=syz.0.12025 [ 535.272781][ T2234] bridge0: entered promiscuous mode [ 535.286843][ T2234] macsec1: entered promiscuous mode [ 535.287836][ T2246] 9pnet_fd: Insufficient options for proto=fd [ 535.292796][ T2234] bridge0: port 3(macsec1) entered blocking state [ 535.305013][ T2234] bridge0: port 3(macsec1) entered disabled state [ 535.311801][ T2234] macsec1: entered allmulticast mode [ 535.317274][ T2234] bridge0: entered allmulticast mode [ 535.328397][ T2234] macsec1: left allmulticast mode [ 535.333519][ T2234] bridge0: left allmulticast mode [ 535.346718][ T2234] bridge0: left promiscuous mode [ 535.390437][ T2259] bridge_slave_0: default FDB implementation only supports local addresses [ 535.422454][T32283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.478348][ T2272] 9pnet_fd: Insufficient options for proto=fd [ 535.581266][ T2287] loop2: detected capacity change from 0 to 512 [ 535.597293][ T2287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.610065][ T2287] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.628286][ T2287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12045'. [ 535.641559][ T2287] bridge0: entered promiscuous mode [ 535.647364][ T2287] macsec0: entered promiscuous mode [ 535.652910][ T2287] bridge0: port 3(macsec0) entered blocking state [ 535.659381][ T2287] bridge0: port 3(macsec0) entered disabled state [ 535.666114][ T2287] macsec0: entered allmulticast mode [ 535.671430][ T2287] bridge0: entered allmulticast mode [ 535.678172][ T2287] macsec0: left allmulticast mode [ 535.683237][ T2287] bridge0: left allmulticast mode [ 535.690117][ T2287] bridge0: left promiscuous mode [ 535.762105][ T2303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12051'. [ 535.793519][ T842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.963174][ T2327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12063'. [ 536.073774][ T2313] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12056'. [ 536.614417][ T2369] loop6: detected capacity change from 0 to 512 [ 536.626995][ T2369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.639583][ T2369] ext4 filesystem being mounted at /341/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.653001][ T2369] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12083'. [ 536.665209][ T2369] bridge0: entered promiscuous mode [ 536.670498][ T2369] macsec0: entered promiscuous mode [ 536.679442][ T2369] bridge0: port 3(macsec0) entered blocking state [ 536.686095][ T2369] bridge0: port 3(macsec0) entered disabled state [ 536.692724][ T2369] macsec0: entered allmulticast mode [ 536.698079][ T2369] bridge0: entered allmulticast mode [ 536.703911][ T2369] macsec0: left allmulticast mode [ 536.709008][ T2369] bridge0: left allmulticast mode [ 536.714590][ T2369] bridge0: left promiscuous mode [ 536.757698][T30881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.995225][ T2380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12086'. [ 537.327479][ T2406] loop5: detected capacity change from 0 to 512 [ 537.335163][ T2406] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 537.368677][ T2395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12093'. [ 537.629749][ T2435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12111'. [ 537.753112][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 537.753130][ T29] audit: type=1326 audit(2000000422.270:71413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2452 comm="syz.6.12120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ff769efc9 code=0x0 [ 538.037958][ T29] audit: type=1326 audit(2000000422.560:71414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.062048][ T29] audit: type=1326 audit(2000000422.560:71415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.085870][ T29] audit: type=1326 audit(2000000422.560:71416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.109931][ T29] audit: type=1326 audit(2000000422.560:71417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.133914][ T29] audit: type=1326 audit(2000000422.560:71418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.157916][ T29] audit: type=1326 audit(2000000422.560:71419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.181777][ T29] audit: type=1326 audit(2000000422.560:71420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.205975][ T29] audit: type=1326 audit(2000000422.560:71421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.229930][ T29] audit: type=1326 audit(2000000422.560:71422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.3.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fcbf860efc9 code=0x7ffc0000 [ 538.289906][ T2470] netlink: 'syz.0.12126': attribute type 1 has an invalid length. [ 538.642805][ T2492] loop6: detected capacity change from 0 to 512 [ 538.650590][ T2484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12132'. [ 538.667434][ T2492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.680424][ T2492] ext4 filesystem being mounted at /351/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.696617][ T2492] bridge0: entered promiscuous mode [ 538.701870][ T2492] macsec0: entered promiscuous mode [ 538.708012][ T2492] bridge0: port 3(macsec0) entered blocking state [ 538.714455][ T2492] bridge0: port 3(macsec0) entered disabled state [ 538.721032][ T2492] macsec0: entered allmulticast mode [ 538.726367][ T2492] bridge0: entered allmulticast mode [ 538.732070][ T2492] macsec0: left allmulticast mode [ 538.737336][ T2492] bridge0: left allmulticast mode [ 538.742872][ T2492] bridge0: left promiscuous mode [ 538.805949][T30881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.478991][ T2550] loop5: detected capacity change from 0 to 512 [ 539.497504][ T2550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.510254][ T2550] ext4 filesystem being mounted at /193/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.526184][ T2550] bridge0: entered promiscuous mode [ 539.531780][ T2550] macsec1: entered promiscuous mode [ 539.537678][ T2550] bridge0: port 3(macsec1) entered blocking state [ 539.544124][ T2550] bridge0: port 3(macsec1) entered disabled state [ 539.550912][ T2550] macsec1: entered allmulticast mode [ 539.556357][ T2550] bridge0: entered allmulticast mode [ 539.562416][ T2550] macsec1: left allmulticast mode [ 539.567497][ T2550] bridge0: left allmulticast mode [ 539.573150][ T2550] bridge0: left promiscuous mode [ 539.617853][T32283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.665249][ T2560] 9pnet_fd: Insufficient options for proto=fd [ 539.923154][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.930997][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.938847][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.946674][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.954413][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.962203][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.970004][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.978201][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.986060][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 539.993867][ T2578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 540.020748][ T2580] netlink: 'syz.0.12173': attribute type 12 has an invalid length. [ 540.028754][ T2580] netlink: 'syz.0.12173': attribute type 29 has an invalid length. [ 540.054856][ T2584] loop2: detected capacity change from 0 to 7 [ 540.061703][ T2586] bridge: RTM_NEWNEIGH with invalid ether address [ 540.068985][ T2586] bridge: RTM_NEWNEIGH with invalid ether address [ 540.097056][ T2591] loop5: detected capacity change from 0 to 512 [ 540.107896][ T2591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.134550][ T2591] ext4 filesystem being mounted at /205/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.154978][ T2591] bridge0: entered promiscuous mode [ 540.160367][ T2591] macsec1: entered promiscuous mode [ 540.166775][ T2591] bridge0: port 3(macsec1) entered blocking state [ 540.173246][ T2591] bridge0: port 3(macsec1) entered disabled state [ 540.179922][ T2591] macsec1: entered allmulticast mode [ 540.185227][ T2591] bridge0: entered allmulticast mode [ 540.191325][ T2591] macsec1: left allmulticast mode [ 540.196411][ T2591] bridge0: left allmulticast mode [ 540.202343][ T2591] bridge0: left promiscuous mode [ 540.269825][T32283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.281649][ T2599] __nla_validate_parse: 5 callbacks suppressed [ 540.281668][ T2599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12180'. [ 540.333297][ T2604] netlink: 'syz.2.12180': attribute type 16 has an invalid length. [ 540.341393][ T2604] netlink: 'syz.2.12180': attribute type 17 has an invalid length. [ 540.432497][ T2610] loop5: detected capacity change from 0 to 764 [ 540.440055][ T2610] rock: directory entry would overflow storage [ 540.446304][ T2610] rock: sig=0x5245, size=8, remaining=5 [ 540.504625][ T2618] bridge: RTM_NEWNEIGH with invalid ether address [ 540.522115][ T2618] bridge: RTM_NEWNEIGH with invalid ether address [ 540.703150][ T2639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 540.773703][ T2624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12191'. [ 541.372762][ T2645] bridge: RTM_NEWNEIGH with invalid ether address [ 541.379951][ T2645] bridge: RTM_NEWNEIGH with invalid ether address [ 541.583645][ T2670] bridge: RTM_NEWNEIGH with invalid ether address [ 541.591473][ T2670] bridge: RTM_NEWNEIGH with invalid ether address [ 541.706548][ T2693] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 541.749145][ T2698] loop5: detected capacity change from 0 to 2048 [ 541.799912][ T2706] bridge: RTM_NEWNEIGH with invalid ether address [ 541.807500][ T2706] bridge: RTM_NEWNEIGH with invalid ether address [ 541.809368][ T2698] Alternate GPT is invalid, using primary GPT. [ 541.820729][ T2698] loop5: p2 p3 p7 [ 541.851625][ T2698] loop2: detected capacity change from 0 to 7 [ 541.858565][ T2698] loop2: [ 541.909017][ T2719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 542.127458][ T2734] netlink: 'syz.5.12241': attribute type 12 has an invalid length. [ 542.135634][ T2734] netlink: 'syz.5.12241': attribute type 29 has an invalid length. [ 542.143612][ T2734] netlink: 148 bytes leftover after parsing attributes in process `syz.5.12241'. [ 542.238029][ T2743] loop2: detected capacity change from 0 to 7 [ 542.299916][ T2744] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 542.320162][ T2751] loop5: detected capacity change from 0 to 2048 [ 542.358407][ T2751] Alternate GPT is invalid, using primary GPT. [ 542.365012][ T2751] loop5: p2 p3 p7 [ 542.375618][ T2751] loop2: detected capacity change from 0 to 7 [ 542.420027][ T2755] loop3: detected capacity change from 0 to 2048 [ 542.462025][ T2755] Alternate GPT is invalid, using primary GPT. [ 542.468620][ T2755] loop3: p2 p3 p7 [ 542.500134][ T2755] loop2: detected capacity change from 0 to 7 [ 542.507656][ T2755] loop2: [ 542.572522][ T2783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12264'. [ 542.618421][ T2781] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 542.716632][ T2790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12267'. [ 542.817287][ T2807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12275'. [ 542.830098][ T2810] loop2: detected capacity change from 0 to 7 [ 542.847561][ T2812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12278'. [ 542.877131][ T2816] loop2: detected capacity change from 0 to 7 [ 542.971464][ T2838] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12291'. [ 542.992142][ T2842] netlink: 'syz.2.12293': attribute type 12 has an invalid length. [ 543.000248][ T2842] netlink: 'syz.2.12293': attribute type 29 has an invalid length. [ 543.008269][ T2842] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12293'. [ 543.034586][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 543.034600][ T29] audit: type=1326 audit(2000000427.550:71493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz.2.12296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 543.066160][ T29] audit: type=1326 audit(2000000427.550:71494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz.2.12296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 543.089985][ T29] audit: type=1326 audit(2000000427.550:71495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz.2.12296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 543.113589][ T29] audit: type=1326 audit(2000000427.550:71496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2847 comm="syz.2.12296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a7a4efc9 code=0x7ffc0000 [ 543.177515][ T2866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12305'. [ 543.193522][ T2868] netlink: 'syz.6.12306': attribute type 12 has an invalid length. [ 543.201576][ T2868] netlink: 'syz.6.12306': attribute type 29 has an invalid length. [ 543.279869][ T2874] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 543.610946][ T29] audit: type=1326 audit(2000000428.130:71497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2893 comm="syz.3.12317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbf860efc9 code=0x0 [ 544.171277][ T2922] 9pnet_fd: Insufficient options for proto=fd [ 544.189923][ T2924] loop2: detected capacity change from 0 to 7 [ 544.230947][ T2926] loop2: detected capacity change from 0 to 512 [ 544.248758][ T2926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.274971][ T2926] ext4 filesystem being mounted at /238/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.281924][ T2926] bridge0: entered promiscuous mode [ 544.290929][ T2926] macsec0: entered promiscuous mode [ 544.291055][ T2905] ================================================================== [ 544.296652][ T2926] bridge0: port 3(macsec0) entered blocking state [ 544.304242][ T2905] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 544.304282][ T2905] [ 544.304287][ T2905] write to 0xffffffff86ab31f0 of 88 bytes by task 2926 on cpu 1: [ 544.310760][ T2926] bridge0: port 3(macsec0) entered disabled state [ 544.317720][ T2905] prb_reserve+0x695/0xaf0 [ 544.320294][ T2926] macsec0: entered allmulticast mode [ 544.327790][ T2905] vprintk_store+0x56d/0x860 [ 544.327832][ T2905] vprintk_emit+0x10d/0x580 [ 544.334359][ T2926] bridge0: entered allmulticast mode [ 544.338653][ T2905] vprintk_default+0x26/0x30 [ 544.338693][ T2905] vprintk+0x1d/0x30 [ 544.338718][ T2905] _printk+0x79/0xa0 [ 544.338753][ T2905] __netdev_printk+0x321/0x3e0 [ 544.338790][ T2905] netdev_info+0x9b/0xd0 [ 544.338816][ T2905] __dev_set_promiscuity+0x233/0x450 [ 544.385221][ T2905] __dev_change_flags+0x2c6/0x400 [ 544.390274][ T2905] rtnl_newlink_create+0x36b/0x620 [ 544.395398][ T2905] rtnl_newlink+0xf29/0x12d0 [ 544.400012][ T2905] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 544.404971][ T2905] netlink_rcv_skb+0x123/0x220 [ 544.409742][ T2905] rtnetlink_rcv+0x1c/0x30 [ 544.414172][ T2905] netlink_unicast+0x5c0/0x690 [ 544.418942][ T2905] netlink_sendmsg+0x58b/0x6b0 [ 544.423717][ T2905] __sock_sendmsg+0x145/0x180 [ 544.428397][ T2905] ____sys_sendmsg+0x31e/0x4e0 [ 544.433173][ T2905] ___sys_sendmsg+0x17b/0x1d0 [ 544.437866][ T2905] __x64_sys_sendmsg+0xd4/0x160 [ 544.442816][ T2905] x64_sys_call+0x191e/0x3000 [ 544.447514][ T2905] do_syscall_64+0xd2/0x200 [ 544.452041][ T2905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.457947][ T2905] [ 544.460279][ T2905] read to 0xffffffff86ab31f0 of 8 bytes by task 2905 on cpu 0: [ 544.467819][ T2905] _prb_read_valid+0x383/0x920 [ 544.472618][ T2905] prb_read_valid+0x3c/0x60 [ 544.477133][ T2905] console_unlock+0x164/0x2e0 [ 544.481832][ T2905] con_flush_chars+0xb2/0x1b0 [ 544.486518][ T2905] con_write+0x2e/0x40 [ 544.490596][ T2905] n_tty_write+0x7ca/0xb40 [ 544.495113][ T2905] file_tty_write+0x378/0x690 [ 544.499804][ T2905] tty_write+0x25/0x30 [ 544.503886][ T2905] vfs_write+0x52a/0x960 [ 544.508219][ T2905] ksys_write+0xda/0x1a0 [ 544.512469][ T2905] __x64_sys_write+0x40/0x50 [ 544.517059][ T2905] x64_sys_call+0x2802/0x3000 [ 544.521760][ T2905] do_syscall_64+0xd2/0x200 [ 544.526287][ T2905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.532192][ T2905] [ 544.534511][ T2905] value changed: 0x00000000000024e8 -> 0x00000000000044e8 [ 544.541626][ T2905] [ 544.543962][ T2905] Reported by Kernel Concurrency Sanitizer on: [ 544.550141][ T2905] CPU: 0 UID: 0 PID: 2905 Comm: syz.0.12322 Not tainted syzkaller #0 PREEMPT(voluntary) [ 544.559984][ T2905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 544.570051][ T2905] ================================================================== [ 544.581289][ T2926] macsec0: left allmulticast mode [ 544.586466][ T2926] bridge0: left allmulticast mode [ 544.592553][ T2926] bridge0: left promiscuous mode [ 544.653976][ T842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.