last executing test programs: 2m16.759747821s ago: executing program 32 (id=436): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x40, 0x1, 0x40024b}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2m11.473131827s ago: executing program 33 (id=515): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000280)=0x84) 1m54.09907613s ago: executing program 34 (id=877): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4000000000}, 0x624d, 0x0, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000019140)='@', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 1m45.040841889s ago: executing program 6 (id=1101): r0 = socket$inet6(0xa, 0x1, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e19, 0x80000, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0xfe}}}}], 0x28}, 0x4000000) 1m45.00276338s ago: executing program 6 (id=1092): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.794372387s ago: executing program 6 (id=1095): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x1c8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0xffffff56, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x8, 0x18, 0x4, 0xfffffffffe000001}) 1m44.599197374s ago: executing program 6 (id=1099): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m44.497091638s ago: executing program 6 (id=1100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)='p', 0x1}], 0x1}}], 0x2, 0x24044c45) 1m44.281506515s ago: executing program 6 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1m44.273959756s ago: executing program 35 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 55.748725346s ago: executing program 3 (id=2297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x800000, 0x0, &(0x7f0000048000)=0xfffffffd, 0x1f) 54.896391975s ago: executing program 3 (id=2313): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) 54.853546657s ago: executing program 3 (id=2315): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) close(0x3) 54.789535459s ago: executing program 3 (id=2318): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 54.725007332s ago: executing program 3 (id=2319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000180)=""/88, 0x58}], 0x2}, 0x5}], 0x1, 0x102, 0x0) 53.750831796s ago: executing program 3 (id=2332): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) read$watch_queue(r0, &(0x7f0000000100)=""/96, 0x60) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 53.693693128s ago: executing program 36 (id=2332): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) read$watch_queue(r0, &(0x7f0000000100)=""/96, 0x60) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 39.613187964s ago: executing program 9 (id=2625): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 39.393286942s ago: executing program 9 (id=2634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[], 0xffdd) 39.268333176s ago: executing program 9 (id=2639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 39.15914963s ago: executing program 9 (id=2642): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11044a2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 39.146117831s ago: executing program 9 (id=2643): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xa, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 38.943022798s ago: executing program 9 (id=2649): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x5, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2b, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) 38.942846748s ago: executing program 37 (id=2649): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x5, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2b, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) 12.322326985s ago: executing program 0 (id=3209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 12.264367207s ago: executing program 0 (id=3212): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@llc_tr={0x11, {@llc={0xfc, 0xbc, "eb"}}}}}, 0x0) 12.226070619s ago: executing program 0 (id=3213): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 12.079500364s ago: executing program 0 (id=3217): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 12.060906895s ago: executing program 0 (id=3218): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x44}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.996825097s ago: executing program 0 (id=3221): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x4800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11.947098329s ago: executing program 38 (id=3221): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x4800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7.284446763s ago: executing program 4 (id=3315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004100)={r3, r2, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x1, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast2}}}}}}, 0x0) 7.175217517s ago: executing program 4 (id=3321): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 7.105121639s ago: executing program 4 (id=3323): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffbfffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ftruncate(0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) 7.060419061s ago: executing program 4 (id=3324): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 6.837050939s ago: executing program 4 (id=3325): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x7}, {0x6, 0x2}]}) unshare(0x60600) close_range(r0, 0xffffffffffffffff, 0x0) 6.81241952s ago: executing program 4 (id=3326): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.79553132s ago: executing program 39 (id=3326): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.046795032s ago: executing program 5 (id=3390): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) 2.937008706s ago: executing program 5 (id=3392): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x0, 0x5b, 0x0, 0x0, 0x5, 0x60000000, 0x0, 0xffffff44, 0x0, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffb9) io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 2.81681863s ago: executing program 5 (id=3393): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) munlockall() 2.581070089s ago: executing program 1 (id=3396): futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 2.54877007s ago: executing program 5 (id=3399): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") 2.5479153s ago: executing program 2 (id=3409): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x10a0, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 2.400234925s ago: executing program 1 (id=3400): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000180)={[{@errors_remount}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'dummy0\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) fdatasync(r0) 2.232980701s ago: executing program 2 (id=3401): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r1, 0x1) 2.107308455s ago: executing program 8 (id=3404): fspick(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 2.106760916s ago: executing program 2 (id=3415): r0 = socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 2.020420009s ago: executing program 1 (id=3405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x87, 0x0, @local, @local}}}}, 0x0) 2.009909019s ago: executing program 7 (id=3406): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 1.940158581s ago: executing program 1 (id=3407): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xbb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x5a1f, &(0x7f0000000040)={0x0, 0xb8e5, 0xc000, 0x2, 0x20002f7}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) 1.937490462s ago: executing program 7 (id=3408): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) 1.500361427s ago: executing program 7 (id=3410): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.365017162s ago: executing program 7 (id=3411): unshare(0x68040200) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 1.268051495s ago: executing program 7 (id=3412): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603012bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 1.246943786s ago: executing program 7 (id=3413): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003480), 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) io_setup(0x2007, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1.176744708s ago: executing program 2 (id=3414): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.167664058s ago: executing program 8 (id=3416): unshare(0x600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x1, {0x2, 0x0, 0x1}}, 0x18) recvmsg(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 1.13798304s ago: executing program 8 (id=3417): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) recvmmsg(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000005640)=""/191, 0x3514}], 0x1}, 0x4}], 0x1, 0xc7dca51c736f71e5, 0x0) 1.13735971s ago: executing program 2 (id=3427): fspick(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1.029548044s ago: executing program 8 (id=3418): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000180)={[{@errors_remount}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'dummy0\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) fdatasync(r0) 803.921361ms ago: executing program 5 (id=3419): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7ff}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) 719.260364ms ago: executing program 8 (id=3420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x87, 0x0, @local, @local}}}}, 0x0) 623.890808ms ago: executing program 1 (id=3421): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x840, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,dots,nodots,nodots,quiet,dots,dots,nocase,dots,dots,dots,check=relaxed,nocase,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d6e6f726d616c2c6e6f646f74732c6e66732c6e6f646f74732c0085631469e4e3ebe0f848a069f81e50c93409023d7e4dba3e8c4d8a10a9d296b30d58f9509e00bb34b7828749c7d8f731945afa8a19f315a9bc5e8f36d11609786bb0568a5cdc4806eb6c9bdf47e7ec9616ee240aa0913c1ae2a4a2b172982688119c245062290e392d538e2a7f7d101281cb737e2777fe36c8fdb305fb2b9240a5fe96a39cbb1c9d13c41da60f15645c2e7f2708730b7b91c4d29a0b64caab07109beb5dec6f777effe7c525c26748f8627760b7c6c13e3947e6cf6c2300"/261], 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 4.755759ms ago: executing program 1 (id=3422): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.293649ms ago: executing program 5 (id=3423): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6105077f02"], 0x13) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") 1.64485ms ago: executing program 8 (id=3433): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f030301", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=3424): unshare(0x68040200) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): 4 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 132.878071][ T3303] loop4: p4 size 8388608 extends beyond EOD, truncated [ 133.158664][ T6420] Bluetooth: hci0: command 0x1003 tx timeout [ 133.164867][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.181120][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2298'. [ 133.190222][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2298'. [ 133.199868][ T9861] netlink: 'syz.7.2298': attribute type 6 has an invalid length. [ 133.258778][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2298'. [ 133.267653][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2298'. [ 133.309202][ T9861] netlink: 'syz.7.2298': attribute type 6 has an invalid length. [ 133.419852][ T9877] loop7: detected capacity change from 0 to 512 [ 133.442072][ T9877] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 133.461018][ T9877] EXT4-fs (loop7): 1 truncate cleaned up [ 133.469738][ T9877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.571427][ T5949] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.682570][ T9887] raw_sendmsg: syz.7.2308 forgot to set AF_INET. Fix it! [ 133.744053][ T9846] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 133.746450][ T9846] loop4: p4 size 8388608 extends beyond EOD, truncated [ 134.189172][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 134.200865][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.201404][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 134.212078][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 134.221719][ T4133] udevd[4133]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 134.231692][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 135.061151][ T9948] loop4: detected capacity change from 0 to 512 [ 135.072114][ T9948] EXT4-fs: Ignoring removed i_version option [ 135.085101][ T9948] EXT4-fs: Ignoring removed bh option [ 135.127994][ T41] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.157456][ T9948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.183882][ T41] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 135.185881][ T9948] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.195732][ T41] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 135.311893][ T41] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.367020][ T41] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 135.399343][ T41] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 135.411837][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.470409][ T41] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.486252][ T41] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 135.501592][ T41] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 135.561204][ T41] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.583566][ T41] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 135.595748][ T41] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 135.630547][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.637740][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.693947][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.701043][ T9989] bridge0: port 2(bridge_slave_1) entered listening state [ 135.708291][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.715428][ T9989] bridge0: port 1(bridge_slave_0) entered listening state [ 135.727880][ T9989] bridge0: entered promiscuous mode [ 135.733544][ T9989] bridge0: entered allmulticast mode [ 135.753007][ T9996] loop8: detected capacity change from 0 to 256 [ 135.783327][ T9996] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.854743][ T9959] chnl_net:caif_netlink_parms(): no params data found [ 135.902351][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.909493][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.916621][ T9959] bridge_slave_0: entered allmulticast mode [ 135.923006][ T9959] bridge_slave_0: entered promiscuous mode [ 135.929730][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.936867][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.944023][ T9959] bridge_slave_1: entered allmulticast mode [ 135.950376][ T9959] bridge_slave_1: entered promiscuous mode [ 135.965200][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.975440][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.994400][ T9959] team0: Port device team_slave_0 added [ 136.000791][ T9959] team0: Port device team_slave_1 added [ 136.015484][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.022467][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.048439][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.059524][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.066437][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.092322][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.132053][ T9959] hsr_slave_0: entered promiscuous mode [ 136.142751][ T9959] hsr_slave_1: entered promiscuous mode [ 136.148719][ T9959] debugfs: 'hsr0' already exists in 'hsr' [ 136.154545][ T9959] Cannot create hsr debugfs directory [ 136.170832][T10018] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.180260][T10018] vhci_hcd vhci_hcd.2: default hub control req: 030f vfffa i0001 l0 [ 136.940285][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 136.940300][ T28] audit: type=1326 audit(1775042318.631:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 136.973735][ T28] audit: type=1326 audit(1775042318.661:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 136.997557][ T28] audit: type=1326 audit(1775042318.661:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 137.021637][ T28] audit: type=1326 audit(1775042318.661:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 137.045323][ T28] audit: type=1326 audit(1775042318.661:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 137.069033][ T28] audit: type=1326 audit(1775042318.661:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 137.093455][ T28] audit: type=1326 audit(1775042318.661:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 137.142418][ T28] audit: type=1326 audit(1775042318.661:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 137.171189][ T28] audit: type=1326 audit(1775042318.661:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 137.195043][ T41] bridge_slave_1: left allmulticast mode [ 137.208623][ T41] bridge_slave_1: left promiscuous mode [ 137.224434][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.263853][ T41] bridge_slave_0: left allmulticast mode [ 137.269594][ T41] bridge_slave_0: left promiscuous mode [ 137.275572][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.292567][ T28] audit: type=1326 audit(1775042318.661:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.8.2363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 137.490834][ T41] bond1 (unregistering): (slave geneve2): Releasing active interface [ 137.550476][ T41] smc: removing net device bond0 with user defined pnetid SYZ2 [ 137.576962][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.587163][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.597491][ T41] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 137.608044][ T41] bond0 (unregistering): Released all slaves [ 137.616434][ T41] bond1 (unregistering): Released all slaves [ 137.625409][ T41] bond2 (unregistering): Released all slaves [ 137.670598][ T41] tipc: Left network mode [ 137.678292][ T41] hsr_slave_0: left promiscuous mode [ 137.684148][ T41] hsr_slave_1: left promiscuous mode [ 137.703581][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.714560][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.724120][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.735904][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.745162][ T41] veth1_macvtap: left promiscuous mode [ 137.751272][ T41] veth0_macvtap: left promiscuous mode [ 137.756917][ T41] veth1_vlan: left promiscuous mode [ 137.762385][ T41] veth0_vlan: left promiscuous mode [ 137.822589][ T41] team0 (unregistering): Port device team_slave_1 removed [ 137.831888][ T41] team0 (unregistering): Port device team_slave_0 removed [ 137.860794][T10068] netlink: 'syz.4.2374': attribute type 18 has an invalid length. [ 137.868824][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 137.885048][T10068] netlink: 'syz.4.2374': attribute type 18 has an invalid length. [ 137.885049][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.898672][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 137.901741][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.919409][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.928087][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.946308][T10076] loop4: detected capacity change from 0 to 512 [ 137.954110][T10076] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 137.965744][T10076] EXT4-fs (loop4): 1 truncate cleaned up [ 137.971984][T10076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.994235][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.826681][T10002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.836010][ T9959] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 138.850969][ T9959] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 138.879452][ T9959] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 138.904011][ T9959] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 138.977134][T10095] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 139.047414][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.068447][ T9959] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.132021][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.139093][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.174900][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.181973][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.384089][ T9959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.562664][T10176] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 139.596207][T10176] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2404'. [ 139.637545][T10176] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 139.678862][ T9959] veth0_vlan: entered promiscuous mode [ 139.716150][ T9959] veth1_vlan: entered promiscuous mode [ 139.782259][ T9959] veth0_macvtap: entered promiscuous mode [ 139.790113][T10230] 9p: Bad value for 'wfdno' [ 139.805574][ T9959] veth1_macvtap: entered promiscuous mode [ 139.851081][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.882249][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.895560][ T41] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.904644][ T41] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.913720][ T41] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.937051][ T41] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.980221][T10243] loop2: detected capacity change from 0 to 512 [ 140.001028][T10243] EXT4-fs: inline encryption not supported [ 140.014279][T10243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.055854][T10243] EXT4-fs (loop2): 1 truncate cleaned up [ 140.078230][T10243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.093667][T10258] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.2333'. [ 140.234835][ T7353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.282845][T10273] loop9: detected capacity change from 0 to 512 [ 140.321919][T10273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.348780][T10273] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.504265][ T9959] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.926804][ T10] IPVS: starting estimator thread 0... [ 141.018691][T10318] IPVS: using max 2736 ests per chain, 136800 per kthread [ 141.037945][T10323] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 141.066107][T10323] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.240912][T10354] syz_tun: entered allmulticast mode [ 141.246802][T10353] syz_tun: left allmulticast mode [ 141.331734][T10363] loop9: detected capacity change from 0 to 512 [ 141.351055][T10363] EXT4-fs: Ignoring removed bh option [ 141.358224][T10363] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 141.377534][T10363] EXT4-fs (loop9): 1 truncate cleaned up [ 141.383826][T10363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.418028][ T9959] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.476385][T10372] loop9: detected capacity change from 0 to 1024 [ 141.489222][T10372] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 141.489222][T10372] [ 141.982175][T10414] loop4: detected capacity change from 0 to 128 [ 141.988950][T10414] FAT-fs (loop4): bogus logical sector size 759 [ 141.995224][T10414] FAT-fs (loop4): Can't find a valid FAT filesystem [ 142.111737][T10428] loop4: detected capacity change from 0 to 512 [ 142.118197][T10428] EXT4-fs: Ignoring removed orlov option [ 142.150328][T10428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.164690][T10428] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.184773][T10428] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.2477: corrupted inode contents [ 142.196899][T10428] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #2: comm syz.4.2477: mark_inode_dirty error [ 142.212813][T10428] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.2477: corrupted inode contents [ 142.232496][T10428] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.2477: corrupted inode contents [ 142.244661][T10428] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #2: comm syz.4.2477: mark_inode_dirty error [ 142.247872][T10436] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 142.257938][T10428] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.2477: corrupted inode contents [ 142.278321][T10428] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.2477: mark_inode_dirty error [ 142.294858][T10441] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.2477: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 142.294858][T10441] [ 142.328559][T10441] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.2477: corrupted inode contents [ 142.355836][T10441] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.2477: mark_inode_dirty error [ 142.370872][T10441] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 142.382552][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 142.382564][ T28] audit: type=1326 audit(1775042324.071:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.8.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 142.412455][ T28] audit: type=1326 audit(1775042324.081:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.8.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 142.413143][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.436402][ T28] audit: type=1326 audit(1775042324.081:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.8.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 142.470308][ T28] audit: type=1326 audit(1775042324.081:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.8.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 142.494425][ T28] audit: type=1326 audit(1775042324.081:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.8.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 142.519531][ T28] audit: type=1326 audit(1775042324.081:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.8.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 142.578261][ T28] audit: type=1326 audit(1775042324.081:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.8.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 142.634022][ T28] audit: type=1400 audit(1775042324.181:2407): avc: denied { create } for pid=10448 comm="syz.7.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.653776][ T28] audit: type=1400 audit(1775042324.181:2408): avc: denied { write } for pid=10448 comm="syz.7.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.363154][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2497'. [ 143.415126][T10489] bridge_slave_0: left allmulticast mode [ 143.420870][T10489] bridge_slave_0: left promiscuous mode [ 143.426501][T10489] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.435440][T10489] bridge_slave_1: left allmulticast mode [ 143.441191][T10489] bridge_slave_1: left promiscuous mode [ 143.446875][T10489] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.456345][T10489] bond0: (slave bond_slave_0): Releasing backup interface [ 143.466061][T10489] bond0: (slave bond_slave_1): Releasing backup interface [ 143.477380][T10489] team0: Port device team_slave_0 removed [ 143.486061][T10489] team0: Port device team_slave_1 removed [ 143.492916][T10489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.500340][T10489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.510044][T10489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.698733][T10504] loop4: detected capacity change from 0 to 8192 [ 143.711333][T10503] syz.4.2505: attempt to access beyond end of device [ 143.711333][T10503] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 143.725668][T10503] Buffer I/O error on dev loop4, logical block 57847, async page read [ 143.734541][T10504] syz.4.2505: attempt to access beyond end of device [ 143.734541][T10504] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 143.748457][T10504] Buffer I/O error on dev loop4, logical block 57847, async page read [ 143.756657][T10504] syz.4.2505: attempt to access beyond end of device [ 143.756657][T10504] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 143.770569][T10504] Buffer I/O error on dev loop4, logical block 57847, async page read [ 143.880808][ T28] audit: type=1400 audit(1775042325.571:2409): avc: denied { cmd } for pid=10509 comm="syz.4.2508" path="socket:[29206]" dev="sockfs" ino=29206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.791673][T10393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.852279][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.861550][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.870708][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.879672][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.000022][T10538] netlink: 'syz.4.2517': attribute type 4 has an invalid length. [ 145.041280][T10538] netlink: 'syz.4.2517': attribute type 4 has an invalid length. [ 145.233529][T10556] netlink: 'syz.7.2525': attribute type 39 has an invalid length. [ 145.880195][T10576] loop8: detected capacity change from 0 to 1024 [ 145.900837][T10576] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 145.900837][T10576] [ 145.981246][ T3478] IPVS: starting estimator thread 0... [ 146.071440][T10601] IPVS: using max 2544 ests per chain, 127200 per kthread [ 146.278171][T10617] loop8: detected capacity change from 0 to 512 [ 146.289582][T10617] EXT4-fs: Ignoring removed orlov option [ 146.303917][T10617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.317614][T10617] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.358774][T10617] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #2: comm syz.8.2547: corrupted inode contents [ 146.399523][T10617] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #2: comm syz.8.2547: mark_inode_dirty error [ 146.428779][T10617] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #2: comm syz.8.2547: corrupted inode contents [ 146.496866][T10634] loop4: detected capacity change from 0 to 512 [ 146.559232][T10617] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #2: comm syz.8.2547: corrupted inode contents [ 146.593144][T10617] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #2: comm syz.8.2547: mark_inode_dirty error [ 146.613244][T10617] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #2: comm syz.8.2547: corrupted inode contents [ 146.648645][T10617] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.2547: mark_inode_dirty error [ 146.674263][T10637] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.2547: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 146.674263][T10637] [ 146.718643][T10637] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #2: comm syz.8.2547: corrupted inode contents [ 146.745278][T10637] EXT4-fs error (device loop8): ext4_append:88: inode #2: comm syz.8.2547: mark_inode_dirty error [ 146.771484][T10637] EXT4-fs error (device loop8) in ext4_append:100: Corrupt filesystem [ 146.839023][T10648] tipc: Failed to remove unknown binding: 66,1,1/0:1558012539/1558012541 [ 146.847571][T10648] tipc: Failed to remove unknown binding: 66,1,1/0:1558012539/1558012541 [ 146.861652][ T6577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.052419][T10665] netlink: 'syz.8.2566': attribute type 1 has an invalid length. [ 147.078273][T10665] gretap1: entered allmulticast mode [ 147.086884][T10665] bond2: (slave gretap1): making interface the new active one [ 147.095149][T10665] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 147.142121][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2567'. [ 147.175439][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2567'. [ 147.201663][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2567'. [ 147.211209][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2567'. [ 147.461057][T10702] netlink: 'syz.9.2582': attribute type 39 has an invalid length. [ 148.383588][T10726] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2591'. [ 148.392817][T10726] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2591'. [ 148.563878][T10748] loop4: detected capacity change from 0 to 128 [ 148.588203][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2602'. [ 148.597901][T10748] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 148.618382][T10748] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 148.637796][T10748] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 148.673824][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.947861][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 148.947876][ T28] audit: type=1326 audit(1775042330.631:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10777 comm="syz.8.2615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7faf5b6e6597 code=0x0 [ 149.037922][ T3420] kernel read not supported for file bpf-prog (pid: 3420 comm: kworker/1:4) [ 149.063329][ T28] audit: type=1400 audit(1775042330.751:2417): avc: denied { map } for pid=10789 comm="syz.9.2620" path="socket:[29763]" dev="sockfs" ino=29763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 149.106072][ T28] audit: type=1326 audit(1775042330.791:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 149.131647][ T28] audit: type=1326 audit(1775042330.791:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 149.159602][ T28] audit: type=1326 audit(1775042330.821:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 149.183732][ T28] audit: type=1326 audit(1775042330.821:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 149.208917][ T28] audit: type=1326 audit(1775042330.821:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 149.232706][ T28] audit: type=1326 audit(1775042330.821:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 149.258065][ T28] audit: type=1326 audit(1775042330.841:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 149.282588][ T28] audit: type=1326 audit(1775042330.841:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.4.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 149.309586][T10800] xt_hashlimit: size too large, truncated to 1048576 [ 149.566331][T10820] syzkaller0: entered promiscuous mode [ 149.581445][T10820] syzkaller0: entered allmulticast mode [ 149.743841][ T12] nci: nci_ntf_packet: unknown ntf opcode 0xe27 [ 149.809570][T10845] loop8: detected capacity change from 0 to 128 [ 149.818095][T10845] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 149.832669][T10845] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 149.855735][T10845] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 149.876476][ T6577] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.942222][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.995170][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.056940][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.102121][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.125142][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2656'. [ 150.187343][ T12] bridge_slave_1: left allmulticast mode [ 150.196994][ T12] bridge_slave_1: left promiscuous mode [ 150.203084][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.211096][ T12] bridge_slave_0: left allmulticast mode [ 150.216802][ T12] bridge_slave_0: left promiscuous mode [ 150.224778][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.330595][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.342100][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.352236][ T12] bond0 (unregistering): Released all slaves [ 150.376182][T10862] chnl_net:caif_netlink_parms(): no params data found [ 150.423644][ T12] hsr_slave_0: left promiscuous mode [ 150.433328][ T12] hsr_slave_1: left promiscuous mode [ 150.439135][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.457292][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.465075][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.472506][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.484043][ T12] veth1_macvtap: left promiscuous mode [ 150.489555][ T12] veth0_macvtap: left promiscuous mode [ 150.495052][ T12] veth1_vlan: left promiscuous mode [ 150.500453][ T12] veth0_vlan: left promiscuous mode [ 150.508523][T10902] loop8: detected capacity change from 0 to 128 [ 150.520867][T10832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.582336][ T12] team0 (unregistering): Port device team_slave_1 removed [ 150.592484][ T12] team0 (unregistering): Port device team_slave_0 removed [ 150.691596][T10862] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.720211][T10862] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.748267][T10862] bridge_slave_0: entered allmulticast mode [ 150.755701][T10862] bridge_slave_0: entered promiscuous mode [ 150.769570][T10862] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.776639][T10862] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.788875][T10862] bridge_slave_1: entered allmulticast mode [ 150.801204][T10862] bridge_slave_1: entered promiscuous mode [ 150.824505][T10862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.837231][T10862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.875056][T10862] team0: Port device team_slave_0 added [ 150.885952][T10933] loop8: detected capacity change from 0 to 8192 [ 150.891848][T10862] team0: Port device team_slave_1 added [ 150.929777][T10862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.936931][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.988627][T10862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.007579][T10862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.015724][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.043447][T10862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.235149][T10862] hsr_slave_0: entered promiscuous mode [ 151.243787][T10862] hsr_slave_1: entered promiscuous mode [ 151.250130][T10862] debugfs: 'hsr0' already exists in 'hsr' [ 151.255980][T10862] Cannot create hsr debugfs directory [ 151.436990][T10988] loop2: detected capacity change from 0 to 256 [ 151.481639][T10988] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.710195][T10862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.723371][T10862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.740919][T10862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.778318][T10862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.854785][T10862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.866005][T11026] loop2: detected capacity change from 0 to 512 [ 151.881483][T11026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.895100][T10862] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.898891][T11026] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.919844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.926899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.944485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.951611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.966359][T11036] loop8: detected capacity change from 0 to 256 [ 152.019129][ T7353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.077396][T10862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.178234][T10862] veth0_vlan: entered promiscuous mode [ 152.189386][T10862] veth1_vlan: entered promiscuous mode [ 152.214851][T10862] veth0_macvtap: entered promiscuous mode [ 152.222654][T10862] veth1_macvtap: entered promiscuous mode [ 152.234581][T10862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.246426][T10862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.258171][ T82] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.273803][ T82] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.282896][ T82] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.293492][ T82] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.454444][T11111] batman_adv: batadv0: Adding interface: dummy0 [ 152.460798][T11111] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.487212][T11111] batman_adv: batadv0: Interface activated: dummy0 [ 152.518006][T11111] batadv0: mtu less than device minimum [ 152.525998][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.536739][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.547464][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.558510][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.569198][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.580087][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.590863][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.601839][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.612774][T11111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 152.852764][T11150] loop8: detected capacity change from 0 to 512 [ 152.878152][T11150] EXT4-fs (loop8): 1 orphan inode deleted [ 152.897180][T11150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.944410][ T6577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.317349][T11215] loop2: detected capacity change from 0 to 4096 [ 153.327895][T11215] ext3: Unknown parameter 'obj_type' [ 153.408041][T11228] sch_fq: defrate 4294967295 ignored. [ 153.487673][T11237] loop8: detected capacity change from 0 to 512 [ 153.517168][T11237] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.536117][T11237] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.718731][ T6577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.264785][T11338] loop4: detected capacity change from 0 to 8192 [ 154.604519][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 154.604545][ T28] audit: type=1326 audit(1775042336.291:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd352c819 code=0x7ffc0000 [ 154.649736][ T28] audit: type=1400 audit(1775042336.331:2454): avc: denied { mount } for pid=11377 comm="syz.7.2756" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 154.708079][ T28] audit: type=1400 audit(1775042336.331:2455): avc: denied { search } for pid=11377 comm="syz.7.2756" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.781614][ T28] audit: type=1400 audit(1775042336.331:2456): avc: denied { search } for pid=11377 comm="syz.7.2756" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.836845][ T28] audit: type=1400 audit(1775042336.331:2457): avc: denied { read open } for pid=11377 comm="syz.7.2756" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 154.893644][T11394] loop4: detected capacity change from 0 to 128 [ 154.949215][ T28] audit: type=1326 audit(1775042336.341:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd352c819 code=0x7ffc0000 [ 155.005741][ T28] audit: type=1326 audit(1775042336.341:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd352c819 code=0x7ffc0000 [ 155.033989][ T28] audit: type=1326 audit(1775042336.341:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd352c819 code=0x7ffc0000 [ 155.066095][ T28] audit: type=1326 audit(1775042336.341:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5fd352c819 code=0x7ffc0000 [ 155.083185][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2769'. [ 155.091531][ T28] audit: type=1326 audit(1775042336.341:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11373 comm="syz.2.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd352c819 code=0x7ffc0000 [ 155.147272][T11415] bridge_slave_0: left allmulticast mode [ 155.153814][T11415] bridge_slave_0: left promiscuous mode [ 155.170255][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.179496][T11415] bridge_slave_1: left allmulticast mode [ 155.189763][T11415] bridge_slave_1: left promiscuous mode [ 155.195510][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.238074][T11415] bond0: (slave bond_slave_0): Releasing backup interface [ 155.266592][T11415] bond0: (slave bond_slave_1): Releasing backup interface [ 155.311692][T11415] team0: Port device team_slave_0 removed [ 155.336862][T11415] team0: Port device team_slave_1 removed [ 155.343962][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.355785][T11415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.364638][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.372420][T11415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.423634][T11449] pimreg: entered allmulticast mode [ 155.574966][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2778'. [ 155.671705][T11475] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2781'. [ 155.910720][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2788'. [ 155.960804][T11493] batman_adv: batadv0: Adding interface: dummy0 [ 155.968815][T11493] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.010238][T11493] batman_adv: batadv0: Interface activated: dummy0 [ 156.381912][T11515] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 156.422749][T11515] gretap1: entered allmulticast mode [ 156.438111][T11515] bond1: (slave gretap1): making interface the new active one [ 156.452916][T11515] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 156.989198][T11556] loop4: detected capacity change from 0 to 4096 [ 156.999232][T11556] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 157.007341][T11556] System zones: 0-5 [ 157.019443][T11556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.056249][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.278920][T11591] netlink: 'syz.7.2831': attribute type 1 has an invalid length. [ 157.304408][T11591] bond2: entered allmulticast mode [ 157.350815][T11591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.388787][T11603] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.438676][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2831'. [ 157.492694][T11604] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 157.501605][T11604] bond2: (slave batadv1): making interface the new active one [ 157.509347][T11604] batadv1: entered allmulticast mode [ 157.515752][T11604] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 157.550419][T11603] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.573540][T11591] bond2 (unregistering): (slave batadv1): Releasing active interface [ 157.581875][T11591] batadv1: left allmulticast mode [ 157.588463][T11591] bond2 (unregistering): Released all slaves [ 157.600796][T11603] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.620943][T11615] batman_adv: batadv0: Adding interface: dummy0 [ 157.628620][T11615] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.654953][T11615] batman_adv: batadv0: Interface activated: dummy0 [ 157.675204][T11615] net_ratelimit: 32 callbacks suppressed [ 157.675219][T11615] batadv0: mtu less than device minimum [ 157.687208][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.698175][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.709085][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.719918][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.731028][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.741917][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.752655][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.763536][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.774320][T11615] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 157.794971][T11603] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.809983][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2840'. [ 157.819334][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2840'. [ 157.868417][ T1754] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.890003][ T82] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.915437][ T82] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.935949][ T82] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.075110][T11640] netlink: 'syz.8.2851': attribute type 10 has an invalid length. [ 158.084641][T11640] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.098230][T11640] batman_adv: batadv0: Removing interface: dummy0 [ 158.109070][T11640] team0: Failed to send options change via netlink (err -105) [ 158.116558][T11640] team0: Port device dummy0 added [ 158.127825][T11640] netlink: 'syz.8.2851': attribute type 10 has an invalid length. [ 158.144014][T11640] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 158.181037][T11640] team0: Failed to send options change via netlink (err -105) [ 158.197292][T11640] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 158.208034][T11640] team0: Port device dummy0 removed [ 158.217822][T11640] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.230441][T11653] bridge0: port 1(gretap0) entered blocking state [ 158.236904][T11653] bridge0: port 1(gretap0) entered disabled state [ 158.252283][T11653] gretap0: entered allmulticast mode [ 158.263304][T11653] gretap0: entered promiscuous mode [ 158.316777][ T3400] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 158.329478][ T3400] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.359850][T11670] fido_id[11670]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.429924][T11684] loop8: detected capacity change from 0 to 1024 [ 158.490514][T11684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.521135][T11690] loop0: detected capacity change from 0 to 8192 [ 158.564221][ T6577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.721686][T11700] syzkaller1: entered promiscuous mode [ 158.734344][T11700] syzkaller1: entered allmulticast mode [ 158.822290][T11697] Process accounting resumed [ 159.040428][T11716] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2878'. [ 159.196895][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2886'. [ 160.023014][T11759] veth0: entered promiscuous mode [ 160.042550][T11759] veth0: left promiscuous mode [ 160.197971][T11769] loop0: detected capacity change from 0 to 512 [ 160.256390][T11769] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2903: invalid indirect mapped block 256 (level 2) [ 160.287116][T11769] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 160.288559][T11769] EXT4-fs (loop0): 2 truncates cleaned up [ 160.288688][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 160.309962][ C0] EXT4-fs (loop0): initial error at time 1775042341: ext4_free_branches:1023: inode 11 [ 160.319630][ C0] EXT4-fs (loop0): last error at time 1775042341: ext4_free_branches:1023: inode 11 [ 160.328754][T11766] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2901'. [ 160.339566][T11776] loop2: detected capacity change from 0 to 256 [ 160.348157][T11776] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.360466][T11769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.385947][T11776] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.436762][T11781] loop4: detected capacity change from 0 to 512 [ 160.447117][T11769] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2903: bg 0: block 5: invalid block bitmap [ 160.449093][T11781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.469597][T11769] EXT4-fs error (device loop0) in ext4_setattr:6028: error 28 [ 160.483188][T11781] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #15: comm syz.4.2907: corrupted inode contents [ 160.523563][T11781] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.523737][T11781] EXT4-fs (loop4): Remounting filesystem read-only [ 160.532902][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 160.532920][ C0] EXT4-fs (loop4): initial error at time 1775042342: ext4_do_update_inode:5602: inode 15 [ 160.532946][ C0] EXT4-fs (loop4): last error at time 1775042342: ext4_do_update_inode:5602: inode 15 [ 160.616518][T11792] loop2: detected capacity change from 0 to 1764 [ 160.625693][T11781] EXT4-fs (loop4): 1 orphan inode deleted [ 160.631544][T11792] ISOFS: Unable to identify CD-ROM format. [ 160.637823][T11794] netlink: 'syz.7.2912': attribute type 1 has an invalid length. [ 160.649327][T11781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.659053][T10862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.696133][T11794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.750169][T11800] bond2: (slave macvlan1): making interface the new active one [ 160.769415][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 160.769427][ T28] audit: type=1400 audit(1775042342.461:2489): avc: denied { append } for pid=11801 comm="syz.2.2914" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 160.800497][T11800] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 160.858644][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.903151][ T28] audit: type=1400 audit(1775042342.591:2490): avc: denied { name_bind } for pid=11815 comm="syz.7.2920" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 161.033277][T11822] loop4: detected capacity change from 0 to 2048 [ 161.070908][T11822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.083585][T11822] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.197847][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.284188][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2930'. [ 161.364383][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2933'. [ 161.410980][T11856] loop4: detected capacity change from 0 to 256 [ 161.463875][T11856] FAT-fs (loop4): Directory bread(block 64) failed [ 161.464450][ T28] audit: type=1400 audit(1775042343.151:2491): avc: denied { getopt } for pid=11857 comm="syz.2.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 161.505804][T11856] FAT-fs (loop4): Directory bread(block 65) failed [ 161.512679][T11856] FAT-fs (loop4): Directory bread(block 66) failed [ 161.519527][T11856] FAT-fs (loop4): Directory bread(block 67) failed [ 161.526125][T11856] FAT-fs (loop4): Directory bread(block 68) failed [ 161.562191][T11856] FAT-fs (loop4): Directory bread(block 69) failed [ 161.569075][T11856] FAT-fs (loop4): Directory bread(block 70) failed [ 161.575766][T11856] FAT-fs (loop4): Directory bread(block 71) failed [ 161.582584][T11856] FAT-fs (loop4): Directory bread(block 72) failed [ 161.589352][T11856] FAT-fs (loop4): Directory bread(block 73) failed [ 161.625728][T11867] netlink: 856 bytes leftover after parsing attributes in process `syz.2.2941'. [ 161.781699][T11878] loop8: detected capacity change from 0 to 512 [ 161.832110][T11878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.875978][ T28] audit: type=1400 audit(1775042343.551:2492): avc: denied { read } for pid=11889 comm="syz.0.2951" path="socket:[34856]" dev="sockfs" ino=34856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.878789][T11878] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.042899][ T6577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.102853][T11904] set_capacity_and_notify: 1 callbacks suppressed [ 162.102868][T11904] loop2: detected capacity change from 0 to 1024 [ 162.150314][T11904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.197640][T11911] loop4: detected capacity change from 0 to 512 [ 162.230332][ T7353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.253129][T11911] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 162.272351][T11911] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.2960: inode has both inline data and extents flags [ 162.288646][T11911] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 162.288911][T11911] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2960: couldn't read orphan inode 13 (err -117) [ 162.309880][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 162.309899][ C1] EXT4-fs (loop4): initial error at time 1775042343: ext4_orphan_get:1397: inode 13 [ 162.309938][ C1] EXT4-fs (loop4): last error at time 1775042343: ext4_orphan_get:1397: inode 13 [ 162.379587][T11911] loop4: lost filesystem error report for type 5 error -117 [ 162.380101][T11911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.439262][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.577793][T11922] dvmrp0: entered allmulticast mode [ 162.590559][T11922] dvmrp0: left allmulticast mode [ 162.835486][ T28] audit: type=1326 audit(1775042344.521:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.7.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 162.863474][ T28] audit: type=1326 audit(1775042344.521:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.7.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 162.889209][ T28] audit: type=1326 audit(1775042344.551:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.7.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 162.912798][ T28] audit: type=1326 audit(1775042344.551:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.7.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 162.936820][ T28] audit: type=1326 audit(1775042344.551:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.7.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 162.960602][ T28] audit: type=1326 audit(1775042344.551:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.7.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 163.156899][T11946] net_ratelimit: 10 callbacks suppressed [ 163.156932][T11946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.823867][T11951] syz.7.2974 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 163.836849][T11951] CPU: 0 UID: 0 PID: 11951 Comm: syz.7.2974 Tainted: G W syzkaller #0 PREEMPT(full) [ 163.836880][T11951] Tainted: [W]=WARN [ 163.836887][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.836914][T11951] Call Trace: [ 163.836920][T11951] [ 163.836928][T11951] __dump_stack+0x1d/0x30 [ 163.836953][T11951] dump_stack_lvl+0x95/0xd0 [ 163.836973][T11951] dump_stack+0x15/0x1b [ 163.836985][T11951] dump_header+0x80/0x240 [ 163.837073][T11951] oom_kill_process+0x295/0x350 [ 163.837086][T11951] out_of_memory+0x97d/0xb80 [ 163.837100][T11951] try_charge_memcg+0x62e/0xa10 [ 163.837150][T11951] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 163.837170][T11951] __swap_cache_prepare_and_add+0x67/0x460 [ 163.837259][T11951] ? alloc_pages_mpol+0x217/0x260 [ 163.837276][T11951] swap_cache_alloc_folio+0xa2/0x120 [ 163.837369][T11951] swap_cluster_readahead+0x26e/0x3d0 [ 163.837389][T11951] swapin_readahead+0xde/0x840 [ 163.837455][T11951] ? _raw_spin_unlock+0x9/0x30 [ 163.837471][T11951] ? swap_put_entries_cluster+0x385/0x3a0 [ 163.837497][T11951] ? swap_put_entries_cluster+0x71/0x3a0 [ 163.837630][T11951] ? __rcu_read_unlock+0x4e/0x70 [ 163.837642][T11951] ? swap_cache_get_folio+0x26f/0x280 [ 163.837658][T11951] do_swap_page+0x2fe/0x21e0 [ 163.837702][T11951] ? css_rstat_updated+0xbb/0x280 [ 163.837713][T11951] ? __rcu_read_lock+0x36/0x50 [ 163.837725][T11951] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 163.837741][T11951] handle_mm_fault+0xb46/0x3020 [ 163.837758][T11951] ? vma_start_read+0x1c7/0x2c0 [ 163.837849][T11951] do_user_addr_fault+0x62f/0x1050 [ 163.837867][T11951] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 163.837927][T11951] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 163.837940][T11951] ? trace_page_fault_user+0x1f/0xe0 [ 163.837957][T11951] exc_page_fault+0x62/0xa0 [ 163.837969][T11951] asm_exc_page_fault+0x26/0x30 [ 163.838047][T11951] RIP: 0033:0x7f40984e7978 [ 163.838057][T11951] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 163.838071][T11951] RSP: 002b:00007ffe02282500 EFLAGS: 00010246 [ 163.838081][T11951] RAX: 0000000000000000 RBX: 0000555560850500 RCX: 00007f40984ed04e [ 163.838162][T11951] RDX: 00007ffe02282550 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.838169][T11951] RBP: 00007f40987a7da0 R08: 0000000000000000 R09: 0000000000000000 [ 163.838176][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000280ee [ 163.838183][T11951] R13: 00007f40987a5fac R14: 0000000000027de7 R15: 00007ffe02282680 [ 163.838194][T11951] [ 163.838241][T11951] memory: usage 307200kB, limit 307200kB, failcnt 287 [ 164.100539][T11951] memory+swap: usage 307548kB, limit 9007199254740988kB, failcnt 0 [ 164.108473][T11951] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 164.108857][T11975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.115767][T11951] Memory cgroup stats for /syz7: [ 164.126464][T11951] cache 0 [ 164.135134][T11951] rss 4096 [ 164.138189][T11951] shmem 0 [ 164.143779][T11951] mapped_file 0 [ 164.147339][T11951] dirty 0 [ 164.151748][T11951] writeback 4096 [ 164.156844][T11951] workingset_refault_anon 10 [ 164.161608][T11951] workingset_refault_file 0 [ 164.166168][T11951] swap 356352 [ 164.169945][T11951] swapcached 409600 [ 164.173803][T11951] pgpgin 120575 [ 164.177526][T11951] pgpgout 120572 [ 164.181477][T11951] pgfault 115324 [ 164.185302][T11951] pgmajfault 3 [ 164.189050][T11951] inactive_anon 8192 [ 164.193906][T11975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.206073][T11951] active_anon 0 [ 164.209804][T11951] inactive_file 4096 [ 164.214098][T11951] active_file 0 [ 164.217638][T11951] unevictable 0 [ 164.221338][T11951] hierarchical_memory_limit 314572800 [ 164.226722][T11951] hierarchical_memsw_limit 9223372036854771712 [ 164.233917][T11951] total_cache 0 [ 164.243778][T11951] total_rss 4096 [ 164.248450][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.248749][T11951] total_shmem 0 [ 164.269412][T11975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.274180][T11951] total_mapped_file 0 [ 164.288633][T11951] total_dirty 0 [ 164.292156][T11951] total_writeback 4096 [ 164.296287][T11951] total_workingset_refault_anon 10 [ 164.304384][T11951] total_workingset_refault_file 0 [ 164.310417][T11951] total_swap 356352 [ 164.315574][T11951] total_swapcached 409600 [ 164.321581][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.332734][T11951] total_pgpgin 120575 [ 164.337517][T11975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.349315][T11951] total_pgpgout 120572 [ 164.353444][T11951] total_pgfault 115324 [ 164.358327][T11951] total_pgmajfault 3 [ 164.362981][T11951] total_inactive_anon 8192 [ 164.367475][T11951] total_active_anon 0 [ 164.380255][T11951] total_inactive_file 4096 [ 164.385522][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.402685][T11951] total_active_file 0 [ 164.407222][T11951] total_unevictable 0 [ 164.411399][T11951] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1081,pid=6524,uid=0 [ 164.427423][T11951] Memory cgroup out of memory: Killed process 6524 (syz.7.1081) total-vm:96080kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 164.454216][T11952] syz.7.2974 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 164.468796][T11952] CPU: 0 UID: 0 PID: 11952 Comm: syz.7.2974 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.468991][T11952] Tainted: [W]=WARN [ 164.469004][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.469015][T11952] Call Trace: [ 164.469021][T11952] [ 164.469028][T11952] __dump_stack+0x1d/0x30 [ 164.469051][T11952] dump_stack_lvl+0x95/0xd0 [ 164.469070][T11952] dump_stack+0x15/0x1b [ 164.469141][T11952] dump_header+0x80/0x240 [ 164.469160][T11952] oom_kill_process+0x295/0x350 [ 164.469255][T11952] out_of_memory+0x97d/0xb80 [ 164.469275][T11952] try_charge_memcg+0x62e/0xa10 [ 164.469388][T11952] obj_cgroup_charge_pages+0x23/0xc0 [ 164.469453][T11952] __memcg_kmem_charge_page+0x9e/0x170 [ 164.469477][T11952] __alloc_frozen_pages_noprof+0x18a/0x360 [ 164.469554][T11952] alloc_pages_mpol+0xb3/0x260 [ 164.469582][T11952] alloc_pages_noprof+0x8f/0x140 [ 164.469644][T11952] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 164.469774][T11952] __kvmalloc_node_noprof+0x3d4/0x650 [ 164.469800][T11952] ? futex_hash_allocate+0x190/0x9d0 [ 164.469902][T11952] ? futex_hash_allocate+0x190/0x9d0 [ 164.469980][T11952] futex_hash_allocate+0x190/0x9d0 [ 164.470011][T11952] ? cap_task_prctl+0x13f/0x6e0 [ 164.470097][T11952] futex_hash_prctl+0xd8/0xf0 [ 164.470119][T11952] __se_sys_prctl+0xa3d/0x13f0 [ 164.470147][T11952] __x64_sys_prctl+0x67/0x80 [ 164.470192][T11952] x64_sys_call+0x2533/0x3020 [ 164.470223][T11952] do_syscall_64+0x12c/0x370 [ 164.470290][T11952] ? __common_interrupt+0x60/0xb0 [ 164.470335][T11952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.470354][T11952] RIP: 0033:0x7f409852c819 [ 164.470369][T11952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.470385][T11952] RSP: 002b:00007f4096f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 164.470404][T11952] RAX: ffffffffffffffda RBX: 00007f40987a5fa0 RCX: 00007f409852c819 [ 164.470491][T11952] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 164.470521][T11952] RBP: 00007f40985c2c91 R08: 0000000000000000 R09: 0000000000000000 [ 164.470536][T11952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.470569][T11952] R13: 00007f40987a6038 R14: 00007f40987a5fa0 R15: 00007ffe02282418 [ 164.470587][T11952] [ 164.470770][T11952] memory: usage 307200kB, limit 307200kB, failcnt 287 [ 164.471836][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.485137][T11952] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0 [ 164.726721][T11952] kmem: usage 307040kB, limit 9007199254740988kB, failcnt 0 [ 164.734117][T11952] Memory cgroup stats for /syz7: [ 164.734298][T11952] cache 0 [ 164.742301][T11952] rss 45056 [ 164.745446][T11952] shmem 0 [ 164.748389][T11952] mapped_file 0 [ 164.752036][T11952] dirty 0 [ 164.757447][T11952] writeback 0 [ 164.761146][T11952] workingset_refault_anon 45 [ 164.765747][T11952] workingset_refault_file 0 [ 164.770362][T11952] swap 139264 [ 164.774197][ T1754] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.782791][ T1754] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.792059][T11952] swapcached 552960 [ 164.795857][T11952] pgpgin 120610 [ 164.799409][T11952] pgpgout 120597 [ 164.807941][T11999] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.815472][T11999] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 164.815573][ T312] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.848810][T11952] pgfault 115351 [ 164.853365][T11952] pgmajfault 23 [ 164.868846][T11952] inactive_anon 20480 [ 164.874870][T11952] active_anon 4096 [ 164.879316][T12006] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2993'. [ 164.886196][ T312] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.896677][T11952] inactive_file 0 [ 164.900667][T11952] active_file 4096 [ 164.904649][T11952] unevictable 0 [ 164.916909][T11952] hierarchical_memory_limit 314572800 [ 164.919342][T12006] smc: removing net device bond0 with user defined pnetid SYZ2 [ 164.922638][T11952] hierarchical_memsw_limit 9223372036854771712 [ 164.953137][T12006] bond0 (unregistering): Released all slaves [ 164.970402][T11952] total_cache 0 [ 164.973932][T11952] total_rss 45056 [ 164.979014][T11952] total_shmem 0 [ 164.983299][T11952] total_mapped_file 0 [ 164.987384][T11952] total_dirty 0 [ 164.991248][T11952] total_writeback 0 [ 164.998801][T11952] total_workingset_refault_anon 45 [ 165.025287][T11952] total_workingset_refault_file 0 [ 165.045398][ T50] bridge_slave_1: left allmulticast mode [ 165.045491][T11952] total_swap 139264 [ 165.052267][ T50] bridge_slave_1: left promiscuous mode [ 165.063375][T12014] loop2: detected capacity change from 0 to 8192 [ 165.067425][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.089196][T11952] total_swapcached 552960 [ 165.097268][T11952] total_pgpgin 120610 [ 165.101581][T11952] total_pgpgout 120597 [ 165.106226][ T50] bridge_slave_0: left allmulticast mode [ 165.125272][ T50] bridge_slave_0: left promiscuous mode [ 165.131088][T11952] total_pgfault 115351 [ 165.135226][T11952] total_pgmajfault 23 [ 165.139546][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.146791][T11952] total_inactive_anon 20480 [ 165.152673][T11952] total_active_anon 4096 [ 165.158272][T11952] total_inactive_file 0 [ 165.162664][T11952] total_active_file 4096 [ 165.166920][T11952] total_unevictable 0 [ 165.170932][T11952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2974,pid=11951,uid=0 [ 165.185642][T11952] Memory cgroup out of memory: Killed process 11952 (syz.7.2974) total-vm:96080kB, anon-rss:1328kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 165.320183][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.339818][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.358805][ T50] bond0 (unregistering): Released all slaves [ 165.390630][T11982] chnl_net:caif_netlink_parms(): no params data found [ 165.448359][ T50] hsr_slave_0: left promiscuous mode [ 165.461019][ T50] hsr_slave_1: left promiscuous mode [ 165.475258][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.498561][ T50] batadv0: mtu less than device minimum [ 165.510057][ T50] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.520939][ T50] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.531974][ T50] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.542876][ T50] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.553591][ T50] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.564483][ T50] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.575467][ T50] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.586271][ T50] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 165.628634][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.658951][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.706487][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.735907][ T50] batman_adv: batadv0: Interface deactivated: dummy0 [ 165.755731][ T50] batman_adv: batadv0: Removing interface: dummy0 [ 165.810352][ T50] veth1_macvtap: left promiscuous mode [ 165.815849][ T50] veth0_macvtap: left promiscuous mode [ 165.838719][ T50] veth1_vlan: left promiscuous mode [ 165.846324][ T3403] IPVS: starting estimator thread 0... [ 165.866963][ T50] veth0_vlan: left promiscuous mode [ 165.878523][T12058] netlink: 'syz.8.3004': attribute type 10 has an invalid length. [ 165.937888][T12059] netlink: 'syz.8.3004': attribute type 10 has an invalid length. [ 165.945833][T12053] IPVS: using max 2544 ests per chain, 127200 per kthread [ 166.002042][ T50] team0 (unregistering): Port device team_slave_1 removed [ 166.013318][ T50] team0 (unregistering): Port device team_slave_0 removed [ 166.067700][T12058] bond0: (slave dummy0): Releasing backup interface [ 166.081442][T12058] team0: Port device dummy0 added [ 166.098800][T12059] team0: Port device dummy0 removed [ 166.107957][T12059] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.142431][T11982] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.149776][T11982] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.156895][T11982] bridge_slave_0: entered allmulticast mode [ 166.165075][T11982] bridge_slave_0: entered promiscuous mode [ 166.173935][T11982] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.181094][T11982] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.188512][T11982] bridge_slave_1: entered allmulticast mode [ 166.195050][T11982] bridge_slave_1: entered promiscuous mode [ 166.249846][T12069] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 166.282879][T12069] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.3006'. [ 166.320765][T12075] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.344095][T12075] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.387239][T11982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.398197][T11982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.435700][T11982] team0: Port device team_slave_0 added [ 166.454764][T12075] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.465121][T12075] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.480378][T11982] team0: Port device team_slave_1 added [ 166.524284][T11982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.539047][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.575223][T11982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.600717][T12075] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.620164][T12075] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.634879][T11982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.641961][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.669130][T11982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.711532][T12117] loop2: detected capacity change from 0 to 512 [ 166.721758][T12117] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.732382][T12075] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.743076][T12117] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.744963][T12075] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.760752][T12117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.788875][T12117] EXT4-fs (loop2): 1 truncate cleaned up [ 166.795706][T11982] hsr_slave_0: entered promiscuous mode [ 166.801783][T12117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.814588][T11982] hsr_slave_1: entered promiscuous mode [ 166.821084][T11982] debugfs: 'hsr0' already exists in 'hsr' [ 166.826966][T11982] Cannot create hsr debugfs directory [ 166.862129][ T12] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.870551][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.899345][ T7353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.910614][ T12] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.918976][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.982815][ T12] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.994545][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.035389][ T12] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.055198][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.244215][T12155] loop2: detected capacity change from 0 to 1764 [ 167.256827][T12155] iso9660: Unknown parameter 'ÿ' [ 167.387933][T11982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.412340][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 167.412355][ T28] audit: type=1326 audit(1775042349.091:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.452527][T11982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.480835][ T28] audit: type=1326 audit(1775042349.091:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.504507][T11982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.535301][T11982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.578698][ T28] audit: type=1326 audit(1775042349.101:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.632409][ T28] audit: type=1326 audit(1775042349.101:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.693152][T11982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.708597][ T28] audit: type=1326 audit(1775042349.101:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.749804][T11982] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.781341][T11982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.798620][ T28] audit: type=1326 audit(1775042349.101:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.823581][T11982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.835633][ T28] audit: type=1326 audit(1775042349.101:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.836311][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.861181][ T28] audit: type=1326 audit(1775042349.101:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.866137][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.889806][ T28] audit: type=1326 audit(1775042349.101:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.933028][ T28] audit: type=1326 audit(1775042349.101:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.4.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87010cc819 code=0x7ffc0000 [ 167.933193][T12181] loop8: detected capacity change from 0 to 256 [ 168.020217][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.027266][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.115211][T11982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.199156][T11982] veth0_vlan: entered promiscuous mode [ 168.207232][T11982] veth1_vlan: entered promiscuous mode [ 168.236455][T11982] veth0_macvtap: entered promiscuous mode [ 168.244171][T11982] veth1_macvtap: entered promiscuous mode [ 168.263288][T11982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.276321][T11982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.290941][ T134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.299709][ T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.316854][ T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.346619][ T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.391158][T12251] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.413311][T12258] loop8: detected capacity change from 0 to 256 [ 168.421074][T12258] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.450344][T12251] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.499637][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 168.571408][T12258] FAT-fs (loop8): error, invalid FAT chain (i_pos 196, last_block 8200) [ 168.580082][T12258] FAT-fs (loop8): Filesystem has been set read-only [ 168.683293][T12265] hsr_slave_1 (unregistering): left promiscuous mode [ 168.733658][T12251] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.744014][T12251] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.823636][T12251] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.835705][T12251] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.909589][T12251] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.930084][T12251] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.028695][ T82] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.044457][ T82] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.087542][ T82] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.105365][T12298] loop2: detected capacity change from 0 to 128 [ 169.118656][ T82] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.149450][T12298] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.169486][ T82] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.192956][T12298] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.228684][ T82] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.258599][ T82] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.276745][ T82] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.367138][ T7353] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.635042][T12317] netlink: 39 bytes leftover after parsing attributes in process `syz.0.3053'. [ 170.212461][T12351] loop2: detected capacity change from 0 to 256 [ 170.271111][T12351] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.478901][T12355] loop2: detected capacity change from 0 to 2048 [ 170.498346][T12355] FAT-fs (loop2): FAT read failed (blocknr 1056) [ 170.652915][T12374] all: renamed from bridge_slave_1 (while UP) [ 170.741919][T12379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3084'. [ 171.057754][T12392] loop8: detected capacity change from 0 to 8192 [ 171.112044][T12395] netlink: 'syz.0.3090': attribute type 3 has an invalid length. [ 171.123828][T12398] loop4: detected capacity change from 0 to 512 [ 171.136471][T12398] EXT4-fs (loop4): 1 truncate cleaned up [ 171.144158][T12398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.175771][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 171.182647][T12398] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3091: bg 0: block 465: padding at end of block bitmap is not set [ 171.203454][T12398] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 171.216526][T12398] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.216526][T12398] [ 171.226451][T12398] EXT4-fs (loop4): Total free blocks count 0 [ 171.232520][T12398] EXT4-fs (loop4): Free/Dirty block details [ 171.238442][T12398] EXT4-fs (loop4): free_blocks=0 [ 171.243438][T12398] EXT4-fs (loop4): dirty_blocks=65 [ 171.248727][T12398] EXT4-fs (loop4): Block reservation details [ 171.250614][T12403] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 171.254812][T12398] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 171.259706][ T6577] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 171.287114][ T6577] FAT-fs (loop8): Filesystem has been set read-only [ 171.337437][ T3317] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 171.369428][T12413] batman_adv: batadv0: Adding interface: dummy0 [ 171.384193][T12413] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.416153][T12413] batman_adv: batadv0: Interface activated: dummy0 [ 171.426038][T12413] net_ratelimit: 31 callbacks suppressed [ 171.426051][T12413] batadv0: mtu less than device minimum [ 171.437942][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.448722][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.459588][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.470530][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.481431][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.492394][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.503269][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.514185][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 171.524996][T12413] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 172.053423][T12459] loop2: detected capacity change from 0 to 2048 [ 172.118874][T12459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.154109][T12459] EXT4-fs (loop2): shut down requested (2) [ 172.161227][T12459] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 172.170816][T12459] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 172.266742][ T7353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.468872][T12479] sock: sock_timestamping_bind_phc: sock not bind to device [ 172.867872][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'. [ 172.945981][T12487] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 173.339799][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3141'. [ 173.349004][T12523] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3141'. [ 173.358298][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3141'. [ 173.397891][T12523] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3141'. [ 173.853529][ T28] kauditd_printk_skb: 496 callbacks suppressed [ 173.853543][ T28] audit: type=1326 audit(1775042355.541:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12534 comm="syz.2.3147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fd352c819 code=0x0 [ 173.891135][T12539] netlink: 'syz.0.3149': attribute type 1 has an invalid length. [ 174.022087][T12544] loop0: detected capacity change from 0 to 1764 [ 174.178338][T12551] loop8: detected capacity change from 0 to 1024 [ 174.209447][T12551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.250874][ T6577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.314996][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3186'. [ 175.838960][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3190'. [ 176.187015][T12650] netlink: 'syz.4.3197': attribute type 1 has an invalid length. [ 176.232653][T12648] bridge3: entered promiscuous mode [ 176.248841][T12648] bridge3: entered allmulticast mode [ 176.264177][T12650] bond2: entered promiscuous mode [ 176.273569][T12650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.325516][T12656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.332756][T12656] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 176.344277][T12656] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 176.355805][T12656] bond2: (slave ip6gre2): making interface the new active one [ 176.363503][T12656] ip6gre2: entered promiscuous mode [ 176.370537][T12656] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 176.382938][T12668] geneve2: entered promiscuous mode [ 176.398624][T12668] geneve2: entered allmulticast mode [ 176.406768][ T1754] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.428683][ T1754] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.448342][T12667] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3203'. [ 176.460645][ T1754] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.478551][ T1754] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.546090][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3207'. [ 176.559026][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 176.603680][T12682] netlink: 'syz.4.3211': attribute type 3 has an invalid length. [ 176.618723][T12682] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 176.749638][ T28] audit: type=1400 audit(1775042614.429:3064): avc: denied { watch } for pid=12695 comm="syz.7.3215" path="/" dev="hugetlbfs" ino=36592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 176.925408][ T1754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.973355][T12709] bridge0: left promiscuous mode [ 177.066957][ T1754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.081745][ T28] audit: type=1400 audit(1775042614.769:3065): avc: denied { setopt } for pid=12716 comm="syz.8.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.134649][T12722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=12722 comm=syz.2.3225 [ 177.153020][ T1754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.217441][ T1754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.240943][ T28] audit: type=1326 audit(1775042614.929:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 177.267887][ T28] audit: type=1326 audit(1775042614.929:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 177.303637][ T28] audit: type=1326 audit(1775042614.929:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 177.349633][ T28] audit: type=1326 audit(1775042614.929:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 177.385093][T12711] chnl_net:caif_netlink_parms(): no params data found [ 177.388524][ T28] audit: type=1326 audit(1775042614.929:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 177.415418][ T28] audit: type=1326 audit(1775042614.929:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 177.438923][ T28] audit: type=1326 audit(1775042614.949:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12736 comm="syz.8.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b6ec819 code=0x7ffc0000 [ 177.506825][ T1754] bridge_slave_1: left allmulticast mode [ 177.516320][ T1754] bridge_slave_1: left promiscuous mode [ 177.532276][ T1754] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.561809][ T1754] bridge_slave_0: left allmulticast mode [ 177.567449][ T1754] bridge_slave_0: left promiscuous mode [ 177.600777][ T1754] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.601724][T12758] netlink: 'syz.2.3238': attribute type 1 has an invalid length. [ 177.616029][T12758] netlink: 'syz.2.3238': attribute type 4 has an invalid length. [ 177.668797][T12762] loop2: detected capacity change from 0 to 2048 [ 177.677593][T12764] netlink: 'syz.8.3240': attribute type 1 has an invalid length. [ 177.699097][ T9913] loop2: p1 < > p3 < > p4 < > [ 177.703864][ T9913] loop2: partition table partially beyond EOD, truncated [ 177.711202][ T9913] loop2: p1 start 3405774849 is beyond EOD, truncated [ 177.717991][ T9913] loop2: p3 start 2304 is beyond EOD, truncated [ 177.729990][T12762] loop2: p1 < > p3 < > p4 < > [ 177.734770][T12762] loop2: partition table partially beyond EOD, truncated [ 177.744403][ T1754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.753138][T12762] loop2: p1 start 3405774849 is beyond EOD, truncated [ 177.760170][T12762] loop2: p3 start 2304 is beyond EOD, truncated [ 177.767837][ T1754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.779758][ T1754] bond0 (unregistering): Released all slaves [ 177.838479][T12764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.927295][T12765] bond3: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 178.100338][ T1754] hsr_slave_0: left promiscuous mode [ 178.119155][ T1754] hsr_slave_1: left promiscuous mode [ 178.148912][ T1754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.156287][ T1754] net_ratelimit: 10 callbacks suppressed [ 178.156326][ T1754] batadv0: mtu less than device minimum [ 178.200692][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.211648][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.222660][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.233393][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.244401][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.255019][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.265957][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.276942][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.287759][ T1754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.374508][T12797] loop8: detected capacity change from 0 to 1024 [ 178.381362][T12797] EXT4-fs: Ignoring removed bh option [ 178.397833][T12797] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 178.397833][T12797] [ 178.408637][ T1754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.417176][ T1754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.439251][ T1754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.448699][ T1754] batman_adv: batadv0: Interface deactivated: dummy0 [ 178.455523][ T1754] batman_adv: batadv0: Removing interface: dummy0 [ 178.480366][ T1754] veth1_macvtap: left promiscuous mode [ 178.496334][ T1754] veth0_macvtap: left promiscuous mode [ 178.503507][ T1754] veth1_vlan: left promiscuous mode [ 178.511217][ T1754] veth0_vlan: left promiscuous mode [ 178.707033][ T1754] team0 (unregistering): Port device team_slave_1 removed [ 178.748317][ T1754] team0 (unregistering): Port device team_slave_0 removed [ 178.911992][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.951978][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.030889][T12711] bridge_slave_0: entered allmulticast mode [ 179.037500][T12711] bridge_slave_0: entered promiscuous mode [ 179.119456][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.131521][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.140600][T12711] bridge_slave_1: entered allmulticast mode [ 179.141593][T12819] __nla_validate_parse: 5 callbacks suppressed [ 179.141606][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3256'. [ 179.147174][T12711] bridge_slave_1: entered promiscuous mode [ 179.204024][T12711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.219924][T12711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.250960][T12711] team0: Port device team_slave_0 added [ 179.282999][T12711] team0: Port device team_slave_1 added [ 179.298352][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3260'. [ 179.351257][T12834] veth1_vlan: left promiscuous mode [ 179.402292][T12711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.428103][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.460810][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 179.475537][T12711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.507234][T12711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.514353][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 179.526915][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.581483][T12865] loop8: detected capacity change from 0 to 512 [ 179.583216][T12711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.602210][T12865] EXT4-fs (loop8): blocks per group (255) and clusters per group (8192) inconsistent [ 179.623134][T12863] syzkaller1: entered promiscuous mode [ 179.628663][T12863] syzkaller1: entered allmulticast mode [ 179.683926][T12711] hsr_slave_0: entered promiscuous mode [ 179.690293][T12711] hsr_slave_1: entered promiscuous mode [ 179.696217][T12711] debugfs: 'hsr0' already exists in 'hsr' [ 179.712157][T12711] Cannot create hsr debugfs directory [ 179.982498][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3279'. [ 180.104599][T12711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.123398][T12711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.136049][T12711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.145112][T12711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.486996][T12711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.505974][T12711] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.553858][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 180.580262][ T1754] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.587312][ T1754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.608906][ T1754] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.616046][ T1754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.644138][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 180.677352][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3283'. [ 180.680900][T12711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.721750][T12711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.737005][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3283'. [ 180.801372][T12999] can0: slcan on ptm0. [ 180.827407][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.860239][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.861661][T12711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.891992][T13020] netlink: 'syz.4.3292': attribute type 1 has an invalid length. [ 180.916890][T13020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.937750][T13020] bond3: (slave gretap2): making interface the new active one [ 180.948862][T12999] can0 (unregistered): slcan off ptm0. [ 180.949353][T13020] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 181.031916][T12711] veth0_vlan: entered promiscuous mode [ 181.046845][T12711] veth1_vlan: entered promiscuous mode [ 181.061779][T12711] veth0_macvtap: entered promiscuous mode [ 181.069322][T12711] veth1_macvtap: entered promiscuous mode [ 181.084062][T12711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.091326][T13052] loop4: detected capacity change from 0 to 512 [ 181.091612][T13052] EXT4-fs: Ignoring removed nobh option [ 181.101200][T12711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.117655][ T82] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.140595][T13052] ext4: Unknown parameter 'grpquota..' [ 181.149365][ T82] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.161278][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.184084][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.598272][T13133] netlink: 'syz.2.3312': attribute type 10 has an invalid length. [ 181.637988][T13137] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3314'. [ 181.867712][T13182] loop4: detected capacity change from 0 to 256 [ 181.938690][T13182] loop4: detected capacity change from 256 to 0 [ 181.945012][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 181.957165][T13195] FAT-fs (loop4): Directory bread(block 52) failed [ 181.966819][T13195] FAT-fs (loop4): Directory bread(block 53) failed [ 181.973713][T13195] FAT-fs (loop4): Directory bread(block 54) failed [ 181.980583][T13195] FAT-fs (loop4): Directory bread(block 55) failed [ 181.987112][T13195] FAT-fs (loop4): Directory bread(block 56) failed [ 181.993931][T13195] FAT-fs (loop4): Directory bread(block 57) failed [ 182.000577][T13195] FAT-fs (loop4): Directory bread(block 58) failed [ 182.007234][T13195] FAT-fs (loop4): Directory bread(block 59) failed [ 182.014587][T13195] FAT-fs (loop4): Directory bread(block 3) failed [ 182.032052][ T3317] FAT-fs (loop4): Directory bread(block 3) failed [ 182.091148][T10693] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 182.245864][T13215] chnl_net:caif_netlink_parms(): no params data found [ 182.280135][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.287270][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.294561][T13215] bridge_slave_0: entered allmulticast mode [ 182.301014][T13215] bridge_slave_0: entered promiscuous mode [ 182.307544][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.314695][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.321787][T13215] bridge_slave_1: entered allmulticast mode [ 182.328305][T13215] bridge_slave_1: entered promiscuous mode [ 182.345654][T13215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.356214][T13215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.374733][T13215] team0: Port device team_slave_0 added [ 182.381236][T13215] team0: Port device team_slave_1 added [ 182.394763][T13215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.401757][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.427873][T13215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.439437][T13215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.446398][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.472413][T13215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.499192][T13215] hsr_slave_0: entered promiscuous mode [ 182.505147][T13215] hsr_slave_1: entered promiscuous mode [ 182.511004][T13215] debugfs: 'hsr0' already exists in 'hsr' [ 182.516717][T13215] Cannot create hsr debugfs directory [ 182.577403][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 182.577418][ T28] audit: type=1326 audit(1775042620.259:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.2.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd352c819 code=0x7fc00000 [ 182.905163][T13270] loop2: detected capacity change from 0 to 736 [ 183.133932][T13215] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.161228][T13215] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.180148][T13215] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.192255][T13215] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.260447][T13215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.274326][T13215] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.300259][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.307406][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.336500][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.343585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.384331][T13215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.395182][T13215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.472508][T13215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.523844][T13349] loop1: detected capacity change from 0 to 1024 [ 183.557976][T13349] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 183.583407][T13349] EXT4-fs (loop1): group descriptors corrupted! [ 183.662560][T13215] veth0_vlan: entered promiscuous mode [ 183.670303][T13349] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 183.673864][T13215] veth1_vlan: entered promiscuous mode [ 183.695582][T13215] veth0_macvtap: entered promiscuous mode [ 183.703639][T13215] veth1_macvtap: entered promiscuous mode [ 183.714843][T13215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.726924][T13215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.759711][ T1754] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.781621][ T1754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.797913][ T1754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.824077][ T1754] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.058601][ T28] audit: type=1400 audit(1775042621.739:3098): avc: denied { read } for pid=13417 comm="syz.1.3357" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 184.136495][ T28] audit: type=1400 audit(1775042621.739:3099): avc: denied { open } for pid=13417 comm="syz.1.3357" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 185.280849][T13526] loop1: detected capacity change from 0 to 128 [ 185.295115][T13526] netlink: 'syz.1.3367': attribute type 6 has an invalid length. [ 185.303051][T13526] __nla_validate_parse: 1 callbacks suppressed [ 185.303119][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 185.385240][ T28] audit: type=1400 audit(1775042623.069:3100): avc: denied { read append } for pid=13529 comm="syz.5.3369" name="file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 186.375272][T13603] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 186.396912][T13603] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3399'. [ 186.413512][T13603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.424355][T13603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.434360][T13603] bond0 (unregistering): Released all slaves [ 186.485943][T13607] loop5: detected capacity change from 0 to 8192 [ 186.556856][T13610] loop1: detected capacity change from 0 to 512 [ 186.592500][T13610] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.602161][T13610] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.613151][T13610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.631136][T13610] EXT4-fs (loop1): 1 truncate cleaned up [ 186.649126][T13610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.719050][ T28] audit: type=1326 audit(1775042624.409:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.7.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 186.764900][ T28] audit: type=1400 audit(1775042624.439:3102): avc: denied { shutdown } for pid=13613 comm="syz.2.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.784814][ T28] audit: type=1326 audit(1775042624.439:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.7.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 186.808999][ T28] audit: type=1326 audit(1775042624.439:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.7.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 186.836281][ T28] audit: type=1326 audit(1775042624.439:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.7.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 186.863821][ T28] audit: type=1326 audit(1775042624.439:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.7.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f409852c819 code=0x7ffc0000 [ 186.896345][T12711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.428158][T13637] netlink: 'syz.7.3410': attribute type 1 has an invalid length. [ 187.448673][T13637] netlink: 'syz.7.3410': attribute type 4 has an invalid length. [ 187.466517][T13637] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3410'. [ 187.902879][T13657] loop8: detected capacity change from 0 to 512 [ 187.929178][T13657] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.935723][T13657] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.955156][T13657] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 187.982727][T13657] EXT4-fs (loop8): 1 truncate cleaned up [ 187.995409][T13657] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.195880][ T6577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.290207][T13633] syz.1.3407 (13633) used greatest stack depth: 6856 bytes left [ 188.340480][T13666] loop1: detected capacity change from 0 to 256 [ 188.356682][ T5949] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 188.403809][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 188.403842][ T5949] Tainted: [W]=WARN [ 188.403848][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.403886][ T5949] Call Trace: [ 188.403892][ T5949] [ 188.403901][ T5949] __dump_stack+0x1d/0x30 [ 188.403925][ T5949] dump_stack_lvl+0x95/0xd0 [ 188.403943][ T5949] dump_stack+0x15/0x1b [ 188.403961][ T5949] dump_header+0x80/0x240 [ 188.403997][ T5949] oom_kill_process+0x295/0x350 [ 188.404088][ T5949] out_of_memory+0x97d/0xb80 [ 188.404112][ T5949] try_charge_memcg+0x62e/0xa10 [ 188.404150][ T5949] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 188.404208][ T5949] __swap_cache_prepare_and_add+0x67/0x460 [ 188.404239][ T5949] ? alloc_pages_mpol+0x217/0x260 [ 188.404265][ T5949] swap_cache_alloc_folio+0xa2/0x120 [ 188.404290][ T5949] swap_cluster_readahead+0x26e/0x3d0 [ 188.404319][ T5949] swapin_readahead+0xde/0x840 [ 188.404346][ T5949] ? __rcu_read_unlock+0x4e/0x70 [ 188.404421][ T5949] ? __perf_event_task_sched_in+0xa65/0xad0 [ 188.404445][ T5949] ? __list_add_valid_or_report+0x38/0xe0 [ 188.404468][ T5949] ? __rcu_read_unlock+0x4e/0x70 [ 188.404502][ T5949] ? swap_cache_get_folio+0x26f/0x280 [ 188.404573][ T5949] do_swap_page+0x2fe/0x21e0 [ 188.404596][ T5949] ? __schedule+0x93c/0xd40 [ 188.404619][ T5949] ? __rcu_read_lock+0x36/0x50 [ 188.404636][ T5949] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 188.404735][ T5949] handle_mm_fault+0xb46/0x3020 [ 188.404760][ T5949] ? vma_start_read+0x1c7/0x2c0 [ 188.404837][ T5949] do_user_addr_fault+0x62f/0x1050 [ 188.404903][ T5949] ? trace_page_fault_user+0x1f/0xe0 [ 188.404933][ T5949] exc_page_fault+0x62/0xa0 [ 188.404954][ T5949] asm_exc_page_fault+0x26/0x30 [ 188.404973][ T5949] RIP: 0033:0x7f40984e7997 [ 188.404987][ T5949] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 188.405145][ T5949] RSP: 002b:00007ffe02282710 EFLAGS: 00010202 [ 188.405161][ T5949] RAX: 0000000000000000 RBX: 0000555560850500 RCX: 00007f40984e7997 [ 188.405174][ T5949] RDX: 00007ffe02282750 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.405241][ T5949] RBP: 00007ffe022827bc R08: 0000000000000000 R09: 0000000000000000 [ 188.405254][ T5949] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 188.405268][ T5949] R13: 00000000000927c0 R14: 000000000002dd23 R15: 00007ffe02282810 [ 188.405287][ T5949] [ 188.405294][ T5949] memory: usage 307200kB, limit 307200kB, failcnt 472 [ 188.519651][T13666] loop1: detected capacity change from 256 to 0 [ 188.538754][ T5949] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 188.548746][ C0] I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 188.554657][ T5949] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 188.628696][T13667] FAT-fs (loop1): Directory bread(block 52) failed [ 188.648616][ T5949] Memory cgroup stats for [ 188.688831][T13667] FAT-fs (loop1): Directory bread(block 53) failed [ 188.728623][ T5949] /syz7: [ 188.728943][ T5949] cache 0 [ 188.734696][ T5949] rss 0 [ 188.737444][ T5949] shmem 0 [ 188.749162][T13667] FAT-fs (loop1): Directory bread(block 54) failed [ 188.750646][ T5949] mapped_file 0 [ 188.755807][T13667] FAT-fs (loop1): Directory bread(block 55) failed [ 188.767929][T13667] FAT-fs (loop1): Directory bread(block 56) failed [ 188.768623][ T5949] dirty 0 [ 188.774570][T13667] FAT-fs (loop1): Directory bread(block 57) failed [ 188.777658][ T5949] writeback 0 [ 188.784077][T13667] FAT-fs (loop1): Directory bread(block 58) failed [ 188.787491][ T5949] workingset_refault_anon 80 [ 188.793828][T13667] FAT-fs (loop1): Directory bread(block 59) failed [ 188.804844][ T5949] workingset_refault_file 0 [ 188.818366][ T5949] swap 249856 [ 188.821945][ T5949] swapcached 790528 [ 188.822006][T13667] FAT-fs (loop1): Directory bread(block 3) failed [ 188.825736][ T5949] pgpgin 146371 [ 188.825744][ T5949] pgpgout 146370 [ 188.825752][ T5949] pgfault 151405 [ 188.825758][ T5949] pgmajfault 53 [ 188.825764][ T5949] inactive_anon 0 [ 188.825770][ T5949] active_anon 0 [ 188.825776][ T5949] inactive_file 0 [ 188.825782][ T5949] active_file 4096 [ 188.861850][ T5949] unevictable 0 [ 188.865300][ T5949] hierarchical_memory_limit 314572800 [ 188.870918][ T5949] hierarchical_memsw_limit 9223372036854771712 [ 188.877129][ T5949] total_cache 0 [ 188.880747][ T5949] total_rss 0 [ 188.884014][ T5949] total_shmem 0 [ 188.887498][ T5949] total_mapped_file 0 [ 188.891746][ T5949] total_dirty 0 [ 188.895258][ T5949] total_writeback 0 [ 188.899160][ T5949] total_workingset_refault_anon 80 [ 188.904258][ T5949] total_workingset_refault_file 0 [ 188.909837][T12711] FAT-fs (loop1): Directory bread(block 3) failed [ 188.928361][ T5949] total_swap 249856 [ 188.937285][T12711] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 188.945395][ T5949] total_swapcached 790528 [ 188.950435][ T5949] total_pgpgin 146371 [ 188.954407][ T5949] total_pgpgout 146370 [ 188.958462][ T5949] total_pgfault 151405 [ 188.965014][ T5949] total_pgmajfault 53 [ 188.969194][ T5949] total_inactive_anon 0 [ 188.973415][ T5949] total_active_anon 0 [ 188.977639][ T5949] total_inactive_file 0 [ 188.982037][ T5949] total_active_file 4096 [ 188.986342][ T5949] total_unevictable 0 [ 188.990513][ T5949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3413,pid=13644,uid=0 [ 189.008982][ T5949] Memory cgroup out of memory: Killed process 13644 (syz.7.3413) total-vm:96080kB, anon-rss:1224kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 189.029517][T13680] loop5: detected capacity change from 0 to 512 [ 189.092638][T13680] EXT4-fs (loop5): 1 orphan inode deleted [ 189.101303][T13680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.115099][ T134] __quota_error: 17 callbacks suppressed [ 189.115111][ T134] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.168749][T13680] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.313802][ T134] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 1 [ 189.327292][T13679] ================================================================== [ 189.335376][T13679] BUG: KCSAN: data-race in pfifo_fast_dequeue / pfifo_fast_enqueue [ 189.343284][T13679] [ 189.345601][T13679] write to 0xffff88812a55be20 of 8 bytes by task 13670 on cpu 0: [ 189.353303][T13679] pfifo_fast_dequeue+0x770/0x8f0 [ 189.358321][T13679] __qdisc_run+0x19a/0xc90 [ 189.362739][T13679] __dev_queue_xmit+0xcde/0x1f20 [ 189.367678][T13679] ip_finish_output2+0x705/0x8c0 [ 189.372610][T13679] ip_finish_output+0x112/0x290 [ 189.377459][T13679] ip_output+0xbd/0x1c0 [ 189.381614][T13679] ip_local_out+0xaa/0xd0 [ 189.385935][T13679] iptunnel_xmit+0x3d8/0x6a0 [ 189.390529][T13679] ip_tunnel_xmit+0x1212/0x12d0 [ 189.395386][T13679] ipgre_xmit+0x5c0/0x6a0 [ 189.399717][T13679] dev_hard_start_xmit+0x136/0x3f0 [ 189.404838][T13679] __dev_queue_xmit+0xd9a/0x1f20 [ 189.409780][T13679] __bpf_redirect+0x67f/0x990 [ 189.414463][T13679] bpf_clone_redirect+0x20c/0x290 [ 189.419497][T13679] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 189.424943][T13679] bpf_test_run+0x29d/0x620 [ 189.429440][T13679] bpf_prog_test_run_skb+0x9a4/0xef0 [ 189.434717][T13679] bpf_prog_test_run+0x204/0x340 [ 189.439640][T13679] __sys_bpf+0x52e/0x7e0 [ 189.443869][T13679] __x64_sys_bpf+0x41/0x50 [ 189.448268][T13679] x64_sys_call+0x10cb/0x3020 [ 189.452936][T13679] do_syscall_64+0x12c/0x370 [ 189.457513][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.463389][T13679] [ 189.465695][T13679] read to 0xffff88812a55be20 of 8 bytes by task 13679 on cpu 1: [ 189.473307][T13679] pfifo_fast_enqueue+0xd5/0x2c0 [ 189.478236][T13679] __dev_queue_xmit+0x694/0x1f20 [ 189.483166][T13679] __bpf_redirect+0x862/0x990 [ 189.487844][T13679] bpf_clone_redirect+0x20c/0x290 [ 189.492860][T13679] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 189.498302][T13679] bpf_test_run+0x29d/0x620 [ 189.502795][T13679] bpf_prog_test_run_skb+0x9a4/0xef0 [ 189.508071][T13679] bpf_prog_test_run+0x204/0x340 [ 189.512993][T13679] __sys_bpf+0x52e/0x7e0 [ 189.517222][T13679] __x64_sys_bpf+0x41/0x50 [ 189.521616][T13679] x64_sys_call+0x10cb/0x3020 [ 189.526284][T13679] do_syscall_64+0x12c/0x370 [ 189.530860][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.536741][T13679] [ 189.539045][T13679] value changed: 0xffff88813e6e6700 -> 0x0000000000000000 [ 189.546132][T13679] [ 189.548437][T13679] Reported by Kernel Concurrency Sanitizer on: [ 189.554571][T13679] CPU: 1 UID: 0 PID: 13679 Comm: syz.8.3433 Tainted: G W syzkaller #0 PREEMPT(full) [ 189.565488][T13679] Tainted: [W]=WARN [ 189.569277][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.579314][T13679] ================================================================== [ 191.943502][T13674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.990976][T13215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.283663][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.342653][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.384422][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.471474][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.564597][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.609641][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.639848][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.690242][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.788838][ T12] bridge_slave_1: left allmulticast mode [ 192.794491][ T12] bridge_slave_1: left promiscuous mode [ 192.809578][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.817406][ T12] bridge_slave_0: left allmulticast mode [ 192.823289][ T12] bridge_slave_0: left promiscuous mode [ 192.829062][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.837279][ T12] bridge_slave_1: left allmulticast mode [ 192.843307][ T12] bridge_slave_1: left promiscuous mode [ 192.849057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.856798][ T12] bridge_slave_0: left allmulticast mode [ 192.862571][ T12] bridge_slave_0: left promiscuous mode [ 192.868291][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.961712][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.971493][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.981147][ T12] bond0 (unregistering): Released all slaves [ 193.000017][ T12] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 193.008123][ T12] ip6gre2 (unregistering): left promiscuous mode [ 193.029128][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 193.038529][ T12] bond3 (unregistering): (slave gretap2): Releasing active interface [ 193.050913][ T12] dvmrp0 (unregistering): left allmulticast mode [ 193.101550][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.110883][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.119889][ T12] bond0 (unregistering): Released all slaves [ 193.127239][ T12] bond1 (unregistering): Released all slaves [ 193.135636][ T12] bond2 (unregistering): Released all slaves [ 193.144341][ T12] bond3 (unregistering): Released all slaves [ 193.204072][ T12] tipc: Left network mode [ 193.222053][ T12] hsr_slave_0: left promiscuous mode [ 193.234665][ T12] hsr_slave_1: left promiscuous mode [ 193.242389][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.250756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.258227][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.267136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.290298][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.299122][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.321438][ T12] veth1_macvtap: left promiscuous mode [ 193.326884][ T12] veth0_macvtap: left promiscuous mode [ 193.332642][ T12] veth1_vlan: left promiscuous mode [ 193.337900][ T12] veth0_vlan: left promiscuous mode [ 193.412378][ T12] team0 (unregistering): Port device team_slave_1 removed [ 193.424371][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.459686][ T12] pimreg (unregistering): left allmulticast mode [ 193.495270][ T12] team0 (unregistering): Port device team_slave_1 removed [ 193.506039][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.914711][ T12] IPVS: stop unused estimator thread 0...