last executing test programs: 21.468688791s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x5c43dad4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r0, &(0x7f0000000340)=0x7, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x6, 0x9, 0xb217, 0x80, r2, 0xfffffff7, '\x00', 0x0, r0, 0x1, 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x9, r0, 0x0, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffffffffea5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000006000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000186000000100000000000000000000800ba7f4ff010018130000", @ANYRES32, @ANYBLOB="000100000001"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x7c, &(0x7f0000000200)=""/124, 0x60980, 0x2d, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x2, 0x8, 0x9}, {0x2, 0x2, 0x9, 0xa}, {0x0, 0x5, 0x4, 0x7}, {0x1, 0x3, 0x7, 0x8}], 0x10, 0x3}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x9, &(0x7f0000000800)=ANY=[@ANYBLOB="18090000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f00000005c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x44, '\x00', r10, 0x30, r0, 0x8, &(0x7f0000000600)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x4, 0xbbe1, 0x126d}, 0x10, r11, r6, 0x3, 0x0, &(0x7f0000000700)=[{0x0, 0x3, 0x6, 0xb}, {0x2, 0x4, 0x10, 0xd}, {0x4, 0x4, 0x6, 0x8}], 0x10, 0x8}, 0x90) recvmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000900)='btrfs_convert_extent_bit\x00', r5}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="7bdce8f729fa76d0000000950000000000000000000000000000000000000000154e2dc2d321704714f0e09e021698cc2053c12192fac5ee153d92957f0db48bffee700add267a7c1c2d466eef3669d4ad92d9bca426f46c2ec427a3ef24e620f4d34cd6c37ae2f7ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) close(r3) 20.980446906s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000b363d28f3e570000000f00000295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}]}, 0x28}}, 0x0) 20.339601214s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "a8c3983e8c197022"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2000000) 18.935334119s ago: executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018f9ffffffffffff0f00000010000000050000000300000000000001050000000a004000005f4c5f00"], 0x0, 0x2d, 0x0, 0x0, 0x1000}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14) socket$kcm(0x29, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/71, 0x47}], 0x1, 0x3a, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r4, &(0x7f0000000080)=ANY=[], 0xfdeb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) sendfile(r4, r6, 0x0, 0x2) splice(r3, 0x0, r5, 0x0, 0xfdef, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x501002, 0xc0) 18.571739535s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x401, 0x4) syz_emit_ethernet(0x102, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8460000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 16.921152887s ago: executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ioprio_set$pid(0x2, 0x0, 0x2004) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x20}, 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ptrace(0x10, 0x1) r4 = inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0xd, r5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) membarrier(0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x1000f0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 6.912487551s ago: executing program 1: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x35b, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9f, 0x0, &(0x7f00000000c0)) 6.59243378s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="efce4d823cf6c009f98bb1916d6bf172fc99275a2f2183f996fef723355c4bc16cff2269896d30721ecb3acd2dfd7a3c4921b5fc34578714d51a76718fe93120766d9ab49c2bbc82b0", 0x49}, {&(0x7f00000001c0)="cd9bfb0eb9838e8c51f87c119e38c7d51ce2c543f3f497563926b1601d90bcfa0f33771927b8fbcb86455eb46ce78c1b31a4c510b367a9", 0x37}], 0x2, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) 6.294369295s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x401, 0x4) syz_emit_ethernet(0x102, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 6.068304831s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000000, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x200000100000011, 0x803, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5}, {0x6}]}, 0x10) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r8, 0xb704, 0x0) sendto$packet(r4, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x80083313, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000540)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x7ff, 0x4e23, 0x6, 0xa, 0xe0, 0xa0, 0x0, r11, r12}, {0x2d5, 0x1000, 0x72fe, 0x6, 0x0, 0x1ff, 0xb2, 0x3}, {0x8, 0x6, 0x1, 0xfffffffffffffff7}, 0x8, 0x0, 0x0, 0x1, 0x6}, {{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x0, 0x3, 0x2, 0x2, 0xc312, 0x10000, 0x6}}, 0xe8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0xa4, r10, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x8, 0x3}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x7, 0x5}], "fc83e7305bb4f21b"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x78}, {0x40, 0x6}], "51d355ea96bba8e1"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x4}, {0xff}, {0x40, 0x2}, {0x6, 0x2}, {0x58, 0x4}, {0x20, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x8, 0x1}, {0x8, 0x2}, {0x3, 0x6}, {0xff, 0x80}], "aabfbe3cf0daab89"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x6, 0x3}, {0x2, 0x7}, {0x8, 0x3}, {0xc4, 0x6}, {0x3, 0x6}, {0x20, 0x7}, {0x4, 0x7}, {0x1f, 0x4}, {0x80, 0x3}, {0x0, 0x5}], "2812e0ace44b52a9"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x4, 0x1}, {0x2, 0x1}, {0xdb, 0x2}, {0x5}, {0x40}, {0x6, 0x4}, {0x2}], "82a2f9746f62add2"}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000800}, 0x20040010) 4.224866073s ago: executing program 0: quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000002c0)=0x8000000000000000, 0x12) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 3.932167747s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$pppoe(0x18, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000000000000000000200000000080000000000000e0300000000000000000000000000000b01000000000000000000000061"], 0x0, 0x4a}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$pptp(0x18, 0x1, 0x2) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x6}]}}}}}}}}, 0x0) 2.717141304s ago: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) mount$bind(&(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x1) flock(r1, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x8ec3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) splice(r5, 0x0, r2, 0x0, 0x4000000002, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) close(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="9f4798950fc980bedc38fe829eecdf349411a9652a17ac96a84e62b867186b5614fe300a2c5553ae29241617068e119fc4af"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x2, r6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$KDFONTOP_GET(r10, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) 2.21617595s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_exit\x00', r0}, 0x10) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x800007, &(0x7f0000000140)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0xfff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@broadcast}, {@loopback}, {@local}, {@local}, {}]}, @generic={0x0, 0x5, "5fbeb9"}]}}}}}) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x30, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = accept(r3, &(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80) sendmsg$inet(r6, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="f42b1cfc620c19", 0x7}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000200000006001700000000002000000000000000000000f106c7a250a5addec644ff95000000820ef8a8364f53d94b01569f66c94d384b290602cdc5f866378851a715274cd124812628c39d20df7c999c6e85a8e310e781b433d9da2fa4914ab542c7bc28c51b9826120e7467"], 0x38}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(r5, r3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x75, &(0x7f0000000140)={r8, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000340)=0x90) 2.114109406s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x255d, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002030500000000000000003df55e70000800010001"], 0x1c}}, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{}, {}], 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x25ae]) 1.784951986s ago: executing program 0: socket$inet6(0xa, 0x3, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) open(0x0, 0x400301, 0xbf) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.781722937s ago: executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x4}]}}]}, 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) getpgrp(0x0) readv(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13c, 0x13c, 0xc, [@union={0x3, 0x4, 0x0, 0x5, 0x0, 0x4, [{0xc, 0x2, 0x2}, {0x5, 0x2, 0x10000}, {0x0, 0x1, 0x2}, {0xe, 0x5, 0x6c}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x5}}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x7, 0x2}, {0xa, 0x4}, {0xd, 0x4}, {0x4, 0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x8, 0x2}, {0x0, 0x3}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0x0, 0x3}, {0x2, 0x4}, {0x8}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x5}]}, @union={0x2, 0x6, 0x0, 0x5, 0x0, 0xffffffc1, [{0xa, 0x3, 0x1}, {0x10, 0x4, 0xfffff000}, {0x10, 0x1}, {0xa, 0x0, 0x8}, {0x6, 0x1, 0x5}, {0x9, 0x2, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x2e, 0x0, 0x2e, 0x30, 0x2e, 0x0, 0x61]}}, &(0x7f0000001740)=""/4096, 0x160, 0x1000, 0x1, 0xec9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000800), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x13, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x25, '\x00', r4, 0x2a, r6, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf}, 0x10, r7, r5, 0x0, &(0x7f00000009c0)=[r1], 0x0, 0x10, 0x8}, 0x90) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000380), 0x45, 0x7ac, &(0x7f0000000f80)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRiSc2yxWgtHK63RrowlRGITArkEkpBbcvE5Py8h1/w45JL8H8HGSWQThxyCwuwPaWXtyru2tGvHnw+M9d7MG733nTf75mlnvBvAU2sy/ScTcSwiXksixuvrk4gYrKayEbO1cvc2N/LpksTW1jPfJtUydzc38tG0T+pIPfP7iPjs5YgTmb31ltfWF+eKxcJKPT9VWbo8VV5bP3lpaW6hsFBYPj09M3PqzN/OnD64WL//av3ordf/++f3Z3986XcfvPp5ErNxtL6tOY6DMhmT9WMymB7CXf5z0JX1zUcvdFCo6QzIHmZj6FLaMQP1XjkW4zGwX/+M9rJlAMBheTEittoZaLsFAHiiJbXr/7/63Q4AoFca7wPc3dzIN5b+viPRW7f/HREjtfgb9zdrW7L1e3Yj1fugY3eTXXdGkoiYOID6JyPi7Y+fezdd4pDuQwK0cu16RFyYmNw7/id7nlno1l9ar15ozkzet9H4B73zSTr/+Xur+V9me/4TLeY/wy1euw/jwa//zM0DqKatdP73z6Zn2+41xV83MVDP/ao65xtMLl4qFtKx7dcRcTwGh9P89D51HL/z051225rnf9+98fw7af3pz50SmZvZ4d37zM9V5h4l5ma3r0f8Idsq/nT8H672f9Jm/nuuwzr+949X3mq3LY0/jbex7I3/cG3diPhTy/5Ptssk+z6fOFU9HaYaJ0ULH87GWLv6J7M7/Z8uaf2NvwV6Ie3/sf3jn0ian9csd/yrt58W+/LG+KftCjWf/63jb33+DyXPVtND9XVX5yqVlemIoeT/e9ef2tm3kW+UT+M//sfWr//G+Nfq/E//JrzQ4YHI3vrmvYeP/3Cl8c931f9dJ2Lk3uJAu/o76/+ZXft0Mv512sCHPW4AAAAAAAAAAAAAAAAAAAAAAAAA0I1MRByNJJPbTmcyuVztO7x/G2OZYqlcOXGxtLo8H9Xvyp6IwUzjoy7Hmz4Pdbr+efiN/Kn78n+NiN9ExJvDo9V8Ll8qzvc7eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Lm+/9TXw/3u3UAwKEZGeh3CwCAHkuy2X43AQDotZGuSo8eWjsAgN7p7voPAPwSuP4DwNPnAdd//w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR3Xu7Nl02fphcyOf5uevrK0ulq6cnC+UF3NLq/lcvrRyObdQKi0UC7l8aantL7pW+1EslS7PxPLq1alKoVyZKq+tn18qrS5Xzl9amlsonC8M9iwyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhceW19ca5YLKxI9CWx+EWtHx6X9kh0l4hrtf57XNpzcIkY2hklRvszOAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AX4OAAD//1N1IyI=") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004800010000000000000000000a000000", @ANYRES32=r11, @ANYBLOB="00000000140001000f932aec946e94b600000000000000bb080002"], 0x38}}, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x90) 1.62900752s ago: executing program 2: quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000002c0)=0x8000000000000000, 0x12) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15aba33a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f722fc58055b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775aafb8c5509086fdba99dba8fbbc7557df3769126732212b33004a42396dc614c501eddeec8a88861f6de3c01bcdf31dfbd3e1165bbb954434723aa31dfedf3d91791aed6773b6ba1b221c46e5f2c9d6e55a659b29b7865b0a4a66d7ae364022"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 1.534264315s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x401, 0x4) syz_emit_ethernet(0x102, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8460000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 1.43794756s ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000a0000001b0000000600050088a8000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x60}}, 0x0) 1.352341463s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000db00000000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) socket$kcm(0x28, 0x5, 0x0) epoll_create1(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00'}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0), 0x48) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x10) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000100)) tkill(r1, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0x11}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0xc195ad7fd0eeddca, 0x0) recvmsg$unix(r4, &(0x7f0000001740)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000100)=""/255, 0xff}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/32, 0x20}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f0000000580)=""/88, 0x58}, {&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000680)=""/4096, 0x1000}], 0xa}, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x9}]}}}]}, 0x3c}}, 0x0) 1.132845426s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$pppoe(0x18, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000000000000000000200000000080000000000000e0300000000000000000000000000000b01000000000000000000000061"], 0x0, 0x4a}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$pptp(0x18, 0x1, 0x2) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x6}]}}}}}}}}, 0x0) 973.629861ms ago: executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000080)=[{r0, 0xcf9aa3956552e8ca}], 0x1, 0x99) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x4, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800"], 0x0, 0x26}, 0x20) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a'], 0xd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000140)) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, 0x0}, 0x804) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x3) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x2) 833.646002ms ago: executing program 4: perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 787.553579ms ago: executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000140)=0xf02, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000280)=[{0x106, 0x0, 0xfd}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x18503e5, &(0x7f00000005c0)={[{@journal_checksum}, {@data_err_ignore}, {@norecovery}, {@resuid}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@usrjquota}, {@resgid={'resgid', 0x3d, 0xee01}}, {@nomblk_io_submit}], [{@obj_type={'obj_type', 0x3d, ',+}%-[\'#/,'}}, {@appraise}, {@uid_gt}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@subj_user={'subj_user', 0x3d, '!\xa0\xcem\x1e\xfc\xa7=\"s4n\xf9J\\dRC,\xa7{/\x8c\xd4\xe6L\xffY\xbbA\x9e&\xec\xed\x8c\x86\x9d\x00 \x86j'}}, {@pcr={'pcr', 0x3d, 0x3b}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}, 0xff, 0x468, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x7ff, 0x0) getdents64(r2, 0x0, 0x10) close(r2) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) capset(&(0x7f0000000000)={0x20071026}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 683.899675ms ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) memfd_secret(0x0) setsockopt$inet_mreqn(r0, 0x0, 0xf, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) 639.433762ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x6040000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000084) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) 442.222182ms ago: executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="efce4d823cf6c009f98bb1916d6bf172fc99275a2f2183f996fef723355c4bc16cff2269896d30721ecb3acd2dfd7a3c4921b5fc34578714d51a76718fe93120766d9ab49c2bbc82b0", 0x49}, {&(0x7f00000001c0)="cd9bfb0eb9838e8c51f87c119e38c7d51ce2c543f3f497563926b1601d90bcfa0f33771927b8fbcb86455eb46ce78c1b31a4c510b367a9", 0x37}], 0x2, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) 324.60904ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) syz_emit_ethernet(0x3e, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ioprio_set$pid(0x2, 0x0, 0x2004) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) membarrier(0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x1000f0}, 0x20) 0s ago: executing program 2: socket$inet6(0xa, 0x3, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) open(0x0, 0x400301, 0xbf) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): al offset 16 with max blocks 16 with error 117 [ 579.939618][T23457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 579.939618][T23457] [ 580.045297][T16187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.450846][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 580.608876][ T29] audit: type=1326 audit(1719040896.046:17188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23480 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x0 [ 580.710840][T23486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 580.724867][T23486] macvtap7: entered promiscuous mode [ 580.730470][T23486] macvtap7: entered allmulticast mode [ 580.736800][T23486] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 580.746530][T23486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 580.757184][T23486] macvtap7: left promiscuous mode [ 580.762249][T23486] macvtap7: left allmulticast mode [ 581.038278][T23498] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 581.057992][T23498] loop2: detected capacity change from 0 to 2048 [ 581.085304][T23498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.105392][T23498] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 581.121492][T23498] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 581.134062][T23498] EXT4-fs (loop2): This should not happen!! Data will be lost [ 581.134062][T23498] [ 581.208410][T20728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.805919][T23515] loop2: detected capacity change from 0 to 8192 [ 582.218418][T23528] wireguard0: entered promiscuous mode [ 582.224053][T23528] wireguard0: entered allmulticast mode [ 582.323990][T23533] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 582.341160][T23533] loop1: detected capacity change from 0 to 2048 [ 582.366145][T23533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.380561][T23533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 582.396663][T23533] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 582.409188][T23533] EXT4-fs (loop1): This should not happen!! Data will be lost [ 582.409188][T23533] [ 582.485283][T21065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.831607][ T29] audit: type=1326 audit(1719040898.266:17189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23545 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x0 [ 582.882842][ T29] audit: type=1326 audit(1719040898.316:17190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23548 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x0 [ 582.933848][T23550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.946390][T23550] macvtap8: entered promiscuous mode [ 582.951992][T23550] macvtap8: entered allmulticast mode [ 582.958559][T23550] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 582.968997][T23550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.979476][T23550] macvtap8: left promiscuous mode [ 582.984710][T23550] macvtap8: left allmulticast mode [ 583.273329][T23555] bond0: (slave bond_slave_0): Releasing backup interface [ 583.287553][T23555] bond0: (slave bond_slave_1): Releasing backup interface [ 583.310012][T23555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.317555][T23555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.333374][T23555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.340879][T23555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.365398][T23555] bond1: (slave bridge1): Releasing backup interface [ 583.372240][T23555] bridge1: left promiscuous mode [ 583.392154][T23555] bond2: (slave bridge3): Releasing backup interface [ 583.398984][T23555] bridge3: left promiscuous mode [ 583.420511][T23555] bond3: (slave bridge5): Releasing backup interface [ 583.434266][T23555] bridge5: left promiscuous mode [ 584.138515][T23577] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 584.203437][T23581] netlink: 452 bytes leftover after parsing attributes in process `syz-executor.4'. [ 584.276469][T23585] loop2: detected capacity change from 0 to 8192 [ 584.557425][T23592] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.672673][ T29] audit: type=1326 audit(1719040900.106:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23593 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x0 [ 584.774659][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 584.787331][T23595] macvtap9: entered promiscuous mode [ 584.792734][T23595] macvtap9: entered allmulticast mode [ 584.798952][T23595] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 584.808288][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 584.818461][T23595] macvtap9: left promiscuous mode [ 584.823512][T23595] macvtap9: left allmulticast mode [ 585.036928][ T29] audit: type=1326 audit(1719040900.476:17192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x0 [ 585.374077][T23605] loop2: detected capacity change from 0 to 512 [ 585.397186][T23605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.409962][T23605] ext4 filesystem being mounted at /root/syzkaller-testdir1987433096/syzkaller.J6wkKJ/195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.684559][T23614] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 586.151000][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 586.280876][T20728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.440240][T23631] loop1: detected capacity change from 0 to 764 [ 586.463903][T23631] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 586.473285][ T29] audit: type=1400 audit(1719040901.906:17193): avc: denied { setattr } for pid=23629 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 586.813151][T23639] chnl_net:caif_netlink_parms(): no params data found [ 586.849202][T23657] loop4: detected capacity change from 0 to 1764 [ 586.861787][T23639] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.868959][T23639] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.877395][T23639] bridge_slave_0: entered allmulticast mode [ 586.878945][T23657] hugetlbfs: syz-executor.4 (23657): Using mlock ulimits for SHM_HUGETLB is obsolete [ 586.884090][T23639] bridge_slave_0: entered promiscuous mode [ 586.899230][ T29] audit: type=1326 audit(1719040902.346:17194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23651 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x0 [ 586.923536][T23639] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.930676][T23639] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.938045][T23639] bridge_slave_1: entered allmulticast mode [ 586.944882][T23639] bridge_slave_1: entered promiscuous mode [ 586.964707][T23639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.976087][T23639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.997472][T23639] team0: Port device team_slave_0 added [ 587.004387][T23639] team0: Port device team_slave_1 added [ 587.022531][T23639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.029514][T23639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.055536][T23639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.066905][T23639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.073988][T23639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.099959][T23639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.128953][T23639] hsr_slave_0: entered promiscuous mode [ 587.135354][T23639] hsr_slave_1: entered promiscuous mode [ 587.141783][T23639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.149879][T23639] Cannot create hsr debugfs directory [ 587.214742][T23639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.259794][T23667] loop1: detected capacity change from 0 to 512 [ 587.272860][T23639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.297207][T23667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.322554][T23667] ext4 filesystem being mounted at /root/syzkaller-testdir1394472069/syzkaller.35Lwvd/183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.345818][T23639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.370105][T23681] wireguard0: entered promiscuous mode [ 587.375663][T23681] wireguard0: entered allmulticast mode [ 587.450568][T23639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.523645][T23639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 587.534842][T23639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 587.546221][T23639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 587.558395][T23639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 587.586258][T23639] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.593467][T23639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.600830][T23639] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.607930][T23639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.668268][T23639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.685336][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.693391][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.709963][T23639] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.726962][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.734070][ T6976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.764267][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.771378][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.989198][T23639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.205214][T21065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.349711][T23639] veth0_vlan: entered promiscuous mode [ 588.359378][T23639] veth1_vlan: entered promiscuous mode [ 588.381928][T23639] veth0_macvtap: entered promiscuous mode [ 588.390035][T23639] veth1_macvtap: entered promiscuous mode [ 588.402016][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.412550][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.422398][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.432947][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.442847][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.453302][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.463379][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.473831][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.483695][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.494215][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.507109][T23639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.570030][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.580717][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.590697][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.601189][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.611135][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.621601][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.631928][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.642394][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.652332][T23639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.662856][T23639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.674389][T23639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.689612][T23639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.698592][T23639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.707392][T23639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.716151][T23639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.001015][T23720] loop2: detected capacity change from 0 to 1764 [ 589.214513][T23727] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 590.334096][ T29] audit: type=1400 audit(1719040905.776:17195): avc: denied { map } for pid=23762 comm="syz-executor.1" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 590.366418][T23765] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 591.112817][T23785] loop1: detected capacity change from 0 to 1764 [ 591.828979][T23803] loop4: detected capacity change from 0 to 8192 [ 591.842217][ T29] audit: type=1326 audit(1719040907.276:17196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x0 [ 591.944563][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.959237][T23807] macvtap10: entered promiscuous mode [ 591.964917][T23807] macvtap10: entered allmulticast mode [ 591.971404][T23807] 8021q: adding VLAN 0 to HW filter on device macvtap10 [ 591.981293][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.991922][T23807] macvtap10: left promiscuous mode [ 591.997177][T23807] macvtap10: left allmulticast mode [ 592.167570][T23810] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 592.176941][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 592.197930][ T29] audit: type=1326 audit(1719040907.636:17197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2484c480a9 code=0x0 [ 592.222705][ T29] audit: type=1326 audit(1719040907.666:17198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2484c480a9 code=0x0 [ 592.492474][T23819] dummy0: entered promiscuous mode [ 592.677051][T23827] loop4: detected capacity change from 0 to 1764 [ 593.261559][ T29] audit: type=1326 audit(1719040908.696:17199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23841 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x0 [ 594.307369][ T29] audit: type=1326 audit(1719040909.746:17200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23860 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x0 [ 594.409624][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 594.421993][T23865] macvtap7: entered promiscuous mode [ 594.427728][T23865] macvtap7: entered allmulticast mode [ 594.434461][T23865] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 594.444087][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 594.453613][T23865] macvtap7: left promiscuous mode [ 594.458978][T23865] macvtap7: left allmulticast mode [ 594.695460][T23875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23875 comm=syz-executor.0 [ 594.932765][ T29] audit: type=1326 audit(1719040910.366:17201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x0 [ 595.206419][T23889] loop1: detected capacity change from 0 to 128 [ 595.240060][T23890] loop4: detected capacity change from 0 to 256 [ 595.262057][T23890] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 595.276084][ T29] audit: type=1400 audit(1719040910.716:17202): avc: denied { execute } for pid=23888 comm="syz-executor.4" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=4736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 596.174618][T23954] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 596.796345][ T29] audit: type=1400 audit(1719040912.236:17203): avc: denied { read write } for pid=17764 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=4737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 596.820121][ T29] audit: type=1400 audit(1719040912.236:17204): avc: denied { open } for pid=17764 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=4737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 596.843796][ T29] audit: type=1400 audit(1719040912.236:17205): avc: denied { ioctl } for pid=17764 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=4737 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 596.939795][T23974] loop0: detected capacity change from 0 to 512 [ 596.967494][T23975] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 596.977881][T23974] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 596.986113][T23974] EXT4-fs (loop0): orphan cleanup on readonly fs [ 596.987493][T23975] loop1: detected capacity change from 0 to 2048 [ 596.994504][T23974] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 597.014536][T23974] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 597.021287][T23974] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #16: comm syz-executor.0: casefold flag without casefold feature [ 597.028429][T23979] loop4: detected capacity change from 0 to 2048 [ 597.036061][T23974] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 597.053560][T23974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 597.066075][T23975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.081223][T23975] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 597.096277][T23975] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 597.103999][T23979] loop4: p3 < > p4 < > [ 597.108824][T23975] EXT4-fs (loop1): This should not happen!! Data will be lost [ 597.108824][T23975] [ 597.112904][T23979] loop4: partition table partially beyond EOD, truncated [ 597.124576][T23979] loop4: p3 start 4284289 is beyond EOD, truncated [ 597.166695][T23991] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551612) [ 597.227792][T21065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.571177][T24002] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 597.743453][T24007] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 597.829123][T17764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.973267][ T29] audit: type=1326 audit(1719040913.406:17206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24013 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x0 [ 598.039381][T24018] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 598.047790][T24018] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 598.437920][T24032] tipc: Enabling of bearer rejected, failed to enable media [ 598.554040][T24034] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 598.860138][T24042] loop0: detected capacity change from 0 to 512 [ 598.882500][T24042] EXT4-fs (loop0): bad s_min_extra_isize: 65535 [ 598.981216][T24045] loop0: detected capacity change from 0 to 512 [ 599.001678][T24045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 599.014683][T24045] EXT4-fs (loop0): 1 truncate cleaned up [ 599.020706][T24045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.418748][T24076] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 599.509001][T24078] loop1: detected capacity change from 0 to 1024 [ 599.526531][T24078] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 599.537707][T24078] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 599.545953][T24078] EXT4-fs (loop1): orphan cleanup on readonly fs [ 599.553101][T24078] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 599.567238][T24078] EXT4-fs (loop1): Remounting filesystem read-only [ 599.573864][T24078] Quota error (device loop1): write_blk: dquota write failed [ 599.581293][T24078] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 599.591410][T24078] EXT4-fs (loop1): 1 truncate cleaned up [ 599.598262][T24078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 599.610804][T24078] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 599.617656][T24078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.693374][ T29] audit: type=1326 audit(1719040915.126:17207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x7ffc0000 [ 599.717615][ T29] audit: type=1326 audit(1719040915.126:17208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x7ffc0000 [ 599.743271][ T29] audit: type=1326 audit(1719040915.136:17209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6c2fbce0a9 code=0x7ffc0000 [ 599.767427][ T29] audit: type=1326 audit(1719040915.136:17210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x7ffc0000 [ 599.910840][T17764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.051028][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 600.067378][T24092] loop1: detected capacity change from 0 to 512 [ 600.090681][T24092] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 600.098730][T24092] EXT4-fs (loop1): orphan cleanup on readonly fs [ 600.105779][T24092] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 600.121036][T24092] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 600.128498][T24092] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: casefold flag without casefold feature [ 600.141789][T24092] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 600.154775][T24092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 600.250467][T21065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.830138][T24124] 9pnet_fd: Insufficient options for proto=fd [ 601.414768][T24142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 601.857187][T24159] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 601.874984][T24159] loop4: detected capacity change from 0 to 2048 [ 601.898215][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 601.898249][ T29] audit: type=1326 audit(1719040917.336:17237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24162 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x0 [ 601.908941][T24159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.943550][T24159] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 601.958878][T24159] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 601.971380][T24159] EXT4-fs (loop4): This should not happen!! Data will be lost [ 601.971380][T24159] [ 602.026081][T16187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.405945][T24176] wireguard0: entered promiscuous mode [ 602.411622][T24176] wireguard0: entered allmulticast mode [ 602.625201][T24179] loop2: detected capacity change from 0 to 512 [ 602.665714][T24179] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 393: padding at end of block bitmap is not set [ 602.682802][T24179] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 602.693984][T24179] EXT4-fs (loop2): 2 truncates cleaned up [ 602.700074][T24179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.765901][T20728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.949522][T24190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 603.025839][T24193] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.0'. [ 603.332101][T24202] loop4: detected capacity change from 0 to 8192 [ 603.338782][T24206] loop2: detected capacity change from 0 to 128 [ 603.353578][T24206] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 604.040031][ T29] audit: type=1326 audit(1719040919.476:17238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24221 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2484c480a9 code=0x0 [ 604.486748][T24242] loop0: detected capacity change from 0 to 512 [ 604.520372][T24242] EXT4-fs (loop0): orphan cleanup on readonly fs [ 604.526892][T24242] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 604.546006][T24242] EXT4-fs error (device loop0): ext4_quota_enable:7037: comm syz-executor.0: Bad quota inode: 4, type: 1 [ 604.558357][T24242] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 604.574963][T24242] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 604.582496][T24242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 604.600235][T24242] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 604.639131][ T29] audit: type=1326 audit(1719040920.076:17239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 604.664668][ T29] audit: type=1326 audit(1719040920.076:17240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 604.665759][T24242] EXT4-fs warning (device loop0): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 604.665759][T24242] [ 604.688919][ T29] audit: type=1326 audit(1719040920.076:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 604.726459][ T29] audit: type=1326 audit(1719040920.076:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 604.750663][ T29] audit: type=1326 audit(1719040920.076:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 604.774938][ T29] audit: type=1326 audit(1719040920.076:17244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 604.799160][ T29] audit: type=1326 audit(1719040920.076:17245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 604.823271][ T29] audit: type=1326 audit(1719040920.076:17246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 604.912236][T17764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.012644][T24249] syzkaller0: entered promiscuous mode [ 605.018171][T24249] syzkaller0: entered allmulticast mode [ 605.105233][T24251] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 605.337220][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 605.804035][T24282] loop0: detected capacity change from 0 to 512 [ 605.932878][T24288] loop2: detected capacity change from 0 to 2048 [ 605.974041][T24288] loop2: p3 < > p4 < > [ 605.978246][T24288] loop2: partition table partially beyond EOD, truncated [ 605.986245][T24288] loop2: p3 start 4284289 is beyond EOD, truncated [ 606.453357][T24307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 606.466059][T24307] macvtap8: entered promiscuous mode [ 606.471557][T24307] macvtap8: entered allmulticast mode [ 606.477909][T24307] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 606.487378][T24307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 606.497202][T24307] macvtap8: left promiscuous mode [ 606.502343][T24307] macvtap8: left allmulticast mode [ 606.946949][T24321] loop0: detected capacity change from 0 to 2048 [ 606.994033][T24321] loop0: p3 < > p4 < > [ 606.998253][T24321] loop0: partition table partially beyond EOD, truncated [ 607.006561][T24321] loop0: p3 start 4284289 is beyond EOD, truncated [ 607.199759][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 607.199776][ T29] audit: type=1326 audit(1719040922.636:17285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24326 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2fbce0a9 code=0x0 [ 607.276229][T24329] SELinux: Context *)&^]* is not valid (left unmapped). [ 607.276232][ T29] audit: type=1400 audit(1719040922.716:17286): avc: denied { relabelfrom } for pid=24328 comm="syz-executor.0" name="UNIX-STREAM" dev="sockfs" ino=88854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 607.310658][ T29] audit: type=1400 audit(1719040922.716:17287): avc: denied { relabelto } for pid=24328 comm="syz-executor.0" name="UNIX-STREAM" dev="sockfs" ino=88854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="*)&^]*" [ 607.311551][T24330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.759690][ T29] audit: type=1326 audit(1719040923.196:17288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24339 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 607.783954][ T29] audit: type=1326 audit(1719040923.196:17289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24339 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 607.808320][ T29] audit: type=1326 audit(1719040923.196:17290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24339 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 607.832524][ T29] audit: type=1326 audit(1719040923.196:17291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24339 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 607.856767][ T29] audit: type=1326 audit(1719040923.196:17292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24339 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 607.881256][ T29] audit: type=1326 audit(1719040923.196:17293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24339 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2375eee0a9 code=0x7ffc0000 [ 608.018914][ T29] audit: type=1326 audit(1719040923.456:17294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2484c480a9 code=0x0 [ 608.259513][T24354] wireguard0: entered promiscuous mode [ 608.265133][T24354] wireguard0: entered allmulticast mode [ 608.628118][T24358] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 608.637831][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 608.950130][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 608.959807][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.066131][T24371] wireguard0: entered promiscuous mode [ 609.071667][T24371] wireguard0: entered allmulticast mode [ 609.619427][T24389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 609.790070][T24391] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 610.068573][T24397] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 610.078151][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 610.710325][T24414] ipt_REJECT: ECHOREPLY no longer supported. [ 611.263862][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 611.275000][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 611.446949][T24432] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 611.606310][T24434] loop4: detected capacity change from 0 to 1024 [ 611.618480][T24434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.632295][T24434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.034543][T24445] loop4: detected capacity change from 0 to 8192 [ 612.087577][T24448] : renamed from ipvlan1 [ 612.173982][T24454] loop1: detected capacity change from 0 to 256 [ 612.765263][T24471] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 613.033623][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 613.033640][ T29] audit: type=1326 audit(1719040928.466:17312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x0 [ 613.129213][T24480] macvtap7: entered promiscuous mode [ 613.134693][T24480] macvtap7: entered allmulticast mode [ 613.140129][T24480] dummy0: entered allmulticast mode [ 613.158381][T24480] dummy0: left allmulticast mode [ 613.163946][T24480] macvtap7: left promiscuous mode [ 613.169235][T24480] macvtap7: left allmulticast mode [ 613.185161][T24479] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 613.198873][T24479] bridge0: port 3(team0) entered blocking state [ 613.205272][T24479] bridge0: port 3(team0) entered disabled state [ 613.408249][T24486] loop2: detected capacity change from 0 to 8192 [ 614.362699][ T29] audit: type=1326 audit(1719040929.796:17313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24499 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x0 [ 614.410781][ T29] audit: type=1326 audit(1719040929.846:17314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24500 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484c480a9 code=0x7ffc0000 [ 614.435177][ T29] audit: type=1326 audit(1719040929.846:17315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24500 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484c480a9 code=0x7ffc0000 [ 614.477470][ T29] audit: type=1326 audit(1719040929.906:17316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24500 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2484c480a9 code=0x7ffc0000 [ 614.501689][ T29] audit: type=1326 audit(1719040929.906:17317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24500 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2484c45827 code=0x7ffc0000 [ 614.525861][ T29] audit: type=1326 audit(1719040929.906:17318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24500 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2484c0b4e9 code=0x7ffc0000 [ 614.549973][ T29] audit: type=1326 audit(1719040929.906:17319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24500 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2484c480a9 code=0x7ffc0000 [ 614.574101][ T29] audit: type=1326 audit(1719040929.906:17320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24500 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2484c45827 code=0x7ffc0000 [ 614.598274][ T29] audit: type=1326 audit(1719040929.906:17321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24500 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2484c0b4e9 code=0x7ffc0000 [ 614.658976][T24519] loop0: detected capacity change from 0 to 1024 [ 615.374056][ T1610] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.384630][ T1610] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.451036][ T1610] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.461516][ T1610] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.527589][ T1610] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.538011][ T1610] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.677114][ T1610] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.687546][ T1610] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.105988][ T1610] bond0 (unregistering): Released all slaves [ 616.114383][ T1610] bond1 (unregistering): Released all slaves [ 616.122772][ T1610] bond2 (unregistering): Released all slaves [ 616.132059][ T1610] bond3 (unregistering): Released all slaves [ 616.141183][ T1610] bond4 (unregistering): Released all slaves [ 616.222398][ T1610] hsr_slave_0: left promiscuous mode [ 616.228151][ T1610] hsr_slave_1: left promiscuous mode [ 616.235580][ T1610] dummy0: left allmulticast mode [ 616.240661][ T1610] dummy0: left promiscuous mode [ 616.245678][ T1610] veth1_macvtap: left promiscuous mode [ 616.251286][ T1610] veth0_macvtap: left promiscuous mode [ 616.256880][ T1610] veth1_vlan: left promiscuous mode [ 616.262111][ T1610] veth0_vlan: left promiscuous mode [ 616.410091][T24548] chnl_net:caif_netlink_parms(): no params data found [ 616.444652][T24548] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.451734][T24548] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.459045][T24548] bridge_slave_0: entered allmulticast mode [ 616.465812][T24548] bridge_slave_0: entered promiscuous mode [ 616.472989][T24548] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.480152][T24548] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.487979][T24548] bridge_slave_1: entered allmulticast mode [ 616.494728][T24548] bridge_slave_1: entered promiscuous mode [ 616.513501][T24548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.524289][T24548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.544103][T24548] team0: Port device team_slave_0 added [ 616.550746][T24548] team0: Port device team_slave_1 added [ 616.565968][T24548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.572936][T24548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.599123][T24548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.610714][T24548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.617724][T24548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.643765][T24548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.673564][T24548] hsr_slave_0: entered promiscuous mode [ 616.679776][T24548] hsr_slave_1: entered promiscuous mode [ 616.685779][T24548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.693559][T24548] Cannot create hsr debugfs directory [ 616.707323][ T1610] IPVS: stop unused estimator thread 0... [ 616.908602][T24548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 616.917597][T24548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 616.926878][T24548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 616.935874][T24548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.951915][T24548] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.958995][T24548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.966414][T24548] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.973681][T24548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.006236][T24548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.019410][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.027513][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.041247][T24548] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.052064][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.059170][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.069683][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.076867][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.103559][T24548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.114065][T24548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.146539][T24577] 9pnet_fd: Insufficient options for proto=fd [ 617.160977][T24576] loop0: detected capacity change from 0 to 2048 [ 617.179772][T24548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.204817][T24576] loop0: p3 < > p4 < > [ 617.209030][T24576] loop0: partition table partially beyond EOD, truncated [ 617.216417][T24576] loop0: p3 start 4284289 is beyond EOD, truncated [ 617.306423][T24548] veth0_vlan: entered promiscuous mode [ 617.318096][T24548] veth1_vlan: entered promiscuous mode [ 617.331842][T24548] veth0_macvtap: entered promiscuous mode [ 617.339824][T24548] veth1_macvtap: entered promiscuous mode [ 617.355482][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.366149][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.376106][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.386546][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.396410][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.406939][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.416781][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.427243][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.437299][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.447769][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.457691][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.468172][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.480666][T24548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.490582][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.501223][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.511165][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.521664][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.531596][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.542061][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.551997][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.562502][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.572352][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.582825][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.592695][T24548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.603141][T24548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.615959][T24548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.627138][T24548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.636034][T24548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.645014][T24548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.653775][T24548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.709838][T24600] loop0: detected capacity change from 0 to 1764 [ 617.730102][T24600] iso9660: Unknown parameter '-ap' [ 618.213468][T24613] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 618.821928][T24617] loop0: detected capacity change from 0 to 256 [ 619.139346][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 619.139360][ T29] audit: type=1326 audit(1719040934.576:17386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24624 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x0 [ 619.310807][T24630] loop4: detected capacity change from 0 to 2048 [ 619.357045][T24630] loop4: p3 < > p4 < > [ 619.361287][T24630] loop4: partition table partially beyond EOD, truncated [ 619.369815][T24630] loop4: p3 start 4284289 is beyond EOD, truncated [ 619.677882][T24633] chnl_net:caif_netlink_parms(): no params data found [ 619.720623][T24633] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.720838][T24649] loop4: detected capacity change from 0 to 1024 [ 619.727848][T24633] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.741527][T24633] bridge_slave_0: entered allmulticast mode [ 619.748092][T24633] bridge_slave_0: entered promiscuous mode [ 619.755253][T24633] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.762443][T24633] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.763117][T24649] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 619.769821][T24633] bridge_slave_1: entered allmulticast mode [ 619.780418][T24649] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 619.788050][T24633] bridge_slave_1: entered promiscuous mode [ 619.799724][T24649] jbd2_journal_init_inode: Cannot locate journal superblock [ 619.809435][T24649] EXT4-fs (loop4): Could not load journal inode [ 619.825295][T24633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.835848][T24633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.859658][T24633] team0: Port device team_slave_0 added [ 619.866496][T24633] team0: Port device team_slave_1 added [ 619.882795][T24633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.889950][T24633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.916025][T24633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.927940][T24633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.934952][T24633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.961338][T24633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.995544][T24633] hsr_slave_0: entered promiscuous mode [ 620.001829][T24633] hsr_slave_1: entered promiscuous mode [ 620.007864][T24633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.017240][T24633] Cannot create hsr debugfs directory [ 620.086361][T24633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.150445][T24633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.218860][T24633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.275030][T24633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.349768][T24633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 620.358807][T24633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 620.368837][T24633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 620.377863][T24633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 620.395362][T24633] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.402470][T24633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.409935][T24633] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.411139][T24668] loop4: detected capacity change from 0 to 1764 [ 620.417066][T24633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.455588][T24633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.473812][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.481792][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.498010][T24633] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.513056][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.520189][ T6959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.549072][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.556180][ T6959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.576327][T24633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.586858][T24633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.653021][T24633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.660599][T24675] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551359) [ 620.671024][T24675] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 620.790340][T24633] veth0_vlan: entered promiscuous mode [ 620.800013][T24633] veth1_vlan: entered promiscuous mode [ 620.823007][T24633] veth0_macvtap: entered promiscuous mode [ 620.837683][T24633] veth1_macvtap: entered promiscuous mode [ 620.849060][T24687] __nla_validate_parse: 5 callbacks suppressed [ 620.849084][T24687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 620.886368][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.896990][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.906934][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.917386][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.927246][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.937735][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.947630][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.958134][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.968055][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.978625][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.988537][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.999160][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.009010][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.019486][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.032288][T24633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.044672][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.055287][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.065406][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.075989][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.085907][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.096527][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.106441][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.116980][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.126944][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.137457][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.147335][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.157804][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.167664][T24633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.178166][T24633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.193247][T24633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.212789][T24633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.221649][T24633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.230557][T24633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.239502][T24633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.526346][T24697] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.535727][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.784879][ T29] audit: type=1326 audit(1719040937.226:17387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24705 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff958a0a9 code=0x0 [ 621.847128][T24711] loop3: detected capacity change from 0 to 512 [ 621.866695][T24711] EXT4-fs: Ignoring removed bh option [ 621.874393][T24711] EXT4-fs error (device loop3): __ext4_iget:4906: inode #15: block 1803188595: comm syz-executor.3: invalid block [ 621.886933][T24711] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 621.887482][T24714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.902683][T24711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.969624][T24633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.135275][T24722] loop3: detected capacity change from 0 to 256 [ 622.154392][T24722] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 622.164630][T24722] FAT-fs (loop3): Filesystem has been set read-only [ 622.171327][T24722] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 622.181553][T24722] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 622.808257][T24738] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 622.817701][T24738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 623.288335][T24758] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 623.299705][ T29] audit: type=1326 audit(1719040938.736:17388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24756 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efff958a0a9 code=0x0 [ 623.323910][ T29] audit: type=1400 audit(1719040938.736:17389): avc: denied { write } for pid=24756 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 624.077113][T24762] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 624.094030][T24762] loop2: detected capacity change from 0 to 2048 [ 624.115407][T24762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.131420][T24762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 624.146755][T24762] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 624.159339][T24762] EXT4-fs (loop2): This should not happen!! Data will be lost [ 624.159339][T24762] [ 624.240248][T20728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.585112][T24782] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 624.601217][T24782] loop4: detected capacity change from 0 to 1764 [ 624.622204][T24782] iso9660: Unknown parameter 'overriderkckperm' [ 624.666995][T24784] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 624.676406][T24784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 624.980263][T24810] loop4: detected capacity change from 0 to 256 [ 625.000105][T24810] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 625.008046][T24810] FAT-fs (loop4): Filesystem has been set read-only [ 625.141180][T24814] loop2: detected capacity change from 0 to 2048 [ 625.175113][T24814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.190238][T24814] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 625.205434][T24814] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 25 with max blocks 1 with error 117 [ 625.217897][T24814] EXT4-fs (loop2): This should not happen!! Data will be lost [ 625.217897][T24814] [ 625.275404][T20728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.341423][T24820] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 625.357681][T24820] loop4: detected capacity change from 0 to 2048 [ 625.395328][T24820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.409304][T24820] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 625.424813][T24820] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 625.437340][T24820] EXT4-fs (loop4): This should not happen!! Data will be lost [ 625.437340][T24820] [ 625.499884][T24548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.493806][T24856] loop2: detected capacity change from 0 to 8192 [ 626.680605][T24862] loop4: detected capacity change from 0 to 512 [ 626.705796][T24862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.718721][T24862] ext4 filesystem being mounted at /root/syzkaller-testdir1168946889/syzkaller.mar9b3/21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.110943][T24875] __nla_validate_parse: 3 callbacks suppressed [ 627.110964][T24875] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.126639][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.606684][T24548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.847170][T24902] loop4: detected capacity change from 0 to 512 [ 627.870188][T24902] EXT4-fs (loop4): orphan cleanup on readonly fs [ 627.876689][T24902] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 627.895731][T24902] EXT4-fs error (device loop4): ext4_quota_enable:7037: comm syz-executor.4: Bad quota inode: 4, type: 1 [ 627.907612][T24902] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 627.922379][T24902] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 627.929532][T24902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 627.944687][T24902] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 628.003351][T24902] EXT4-fs warning (device loop4): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 628.003351][T24902] [ 628.111250][T24548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.179383][T24911] wireguard0: entered promiscuous mode [ 628.184947][T24911] wireguard0: entered allmulticast mode [ 628.973262][T24919] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 628.982712][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 629.770431][T24955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 630.215068][T24969] wireguard0: entered promiscuous mode [ 630.220632][T24969] wireguard0: entered allmulticast mode [ 630.361061][T24972] loop0: detected capacity change from 0 to 1764 [ 630.377479][T24972] iso9660: Unknown parameter '-ap' [ 631.457208][T24989] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 631.466721][T24989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 631.489765][T24995] loop0: detected capacity change from 0 to 128 [ 631.506273][T24993] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 631.522613][T24993] loop3: detected capacity change from 0 to 2048 [ 631.565770][T24993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.582508][T24993] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 631.599015][T24993] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 631.611656][T24993] EXT4-fs (loop3): This should not happen!! Data will be lost [ 631.611656][T24993] [ 631.709417][T24633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.945394][T25008] qrtr: Invalid version 0 [ 632.060296][T25015] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.413176][T25025] loop4: detected capacity change from 0 to 1764 [ 632.431730][T25025] iso9660: Unknown parameter '-ap' [ 632.575488][T25030] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.585152][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.606317][T25031] loop2: detected capacity change from 0 to 8192 [ 632.925089][T25037] loop3: detected capacity change from 0 to 512 [ 632.939053][T25037] EXT4-fs (loop3): orphan cleanup on readonly fs [ 632.946855][T25037] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 632.969408][T25037] EXT4-fs error (device loop3): ext4_quota_enable:7037: comm syz-executor.3: Bad quota inode: 4, type: 1 [ 632.981317][T25037] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 632.999362][T25037] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 633.006586][T25037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 633.022579][T25037] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 633.082390][T25037] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 633.082390][T25037] [ 633.087790][T25040] loop0: detected capacity change from 0 to 1024 [ 633.108828][T25040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 633.125957][T25040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.141764][ T29] audit: type=1326 audit(1719040948.586:17390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.166011][ T29] audit: type=1326 audit(1719040948.586:17391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.190181][ T29] audit: type=1326 audit(1719040948.586:17392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.214262][ T29] audit: type=1326 audit(1719040948.586:17393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.239307][ T29] audit: type=1326 audit(1719040948.586:17394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.263797][ T29] audit: type=1326 audit(1719040948.586:17395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.290938][ T29] audit: type=1326 audit(1719040948.606:17396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.315131][ T29] audit: type=1326 audit(1719040948.686:17397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.339309][ T29] audit: type=1326 audit(1719040948.686:17398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.363504][ T29] audit: type=1326 audit(1719040948.686:17399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 633.388059][T24633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.844067][T25051] 9pnet_fd: Insufficient options for proto=fd [ 634.168128][T25059] loop4: detected capacity change from 0 to 128 [ 634.189204][T25059] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 634.328175][T25061] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 634.337618][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 634.358142][T17764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.601366][T25069] loop0: detected capacity change from 0 to 512 [ 634.668173][T25069] EXT4-fs (loop0): orphan cleanup on readonly fs [ 634.675908][T25069] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 634.698185][T25069] EXT4-fs error (device loop0): ext4_quota_enable:7037: comm syz-executor.0: Bad quota inode: 4, type: 1 [ 634.713234][T25069] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 634.731731][T25069] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 634.739898][T25069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 634.769849][T25069] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 634.827921][T25069] EXT4-fs warning (device loop0): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 634.827921][T25069] [ 634.922857][T17764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.946941][T25076] loop4: detected capacity change from 0 to 8192 [ 635.732537][T25094] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.741357][T25094] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.749842][T25094] bridge0: entered allmulticast mode [ 635.812052][T25094] bridge_slave_1: left allmulticast mode [ 635.819234][T25094] bridge_slave_1: left promiscuous mode [ 635.826402][T25094] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.839415][T25094] bridge_slave_0: left allmulticast mode [ 635.845657][T25094] bridge_slave_0: left promiscuous mode [ 635.851900][T25094] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.227877][T25108] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 636.244454][T25108] loop4: detected capacity change from 0 to 2048 [ 636.265461][T25108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.281125][T25108] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 636.296071][T25108] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 636.308597][T25108] EXT4-fs (loop4): This should not happen!! Data will be lost [ 636.308597][T25108] [ 636.358392][T25117] loop3: detected capacity change from 0 to 512 [ 636.379289][T25117] EXT4-fs (loop3): orphan cleanup on readonly fs [ 636.385681][T25117] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 636.404256][T25117] EXT4-fs error (device loop3): ext4_quota_enable:7037: comm syz-executor.3: Bad quota inode: 4, type: 1 [ 636.413811][T25118] loop0: detected capacity change from 0 to 512 [ 636.416401][T25117] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 636.425573][T24548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.437461][T25117] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 636.452683][T25117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.455293][T25118] EXT4-fs (loop0): orphan cleanup on readonly fs [ 636.473518][T25118] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 636.491834][T25117] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 636.492022][T25118] EXT4-fs error (device loop0): ext4_quota_enable:7037: comm syz-executor.0: Bad quota inode: 4, type: 1 [ 636.512586][T25118] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 636.527563][T25118] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 636.534735][T25118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.547616][T25117] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 636.547616][T25117] [ 636.562254][T25118] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 636.619612][T24633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.628643][T25118] EXT4-fs warning (device loop0): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 636.628643][T25118] [ 636.714134][T17764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.790196][T25125] loop4: detected capacity change from 0 to 8192 [ 637.070530][ T4772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.192907][ T4772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.253669][ T4772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.320990][ T4772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.421419][ T4772] bridge_slave_1: left allmulticast mode [ 637.427225][ T4772] bridge_slave_1: left promiscuous mode [ 637.433026][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.443016][T25138] loop4: detected capacity change from 0 to 512 [ 637.454712][ T4772] bridge_slave_0: left allmulticast mode [ 637.460414][ T4772] bridge_slave_0: left promiscuous mode [ 637.466268][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.473662][T25138] EXT4-fs: Ignoring removed nobh option [ 637.523211][T25138] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 637.539076][T25138] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #13: comm syz-executor.4: casefold flag without casefold feature [ 637.553075][T25138] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 637.569382][T25138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.643360][T24548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.690237][ T4772] hsr_slave_0: left promiscuous mode [ 637.697020][ T4772] hsr_slave_1: left promiscuous mode [ 637.706202][ T4772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.713936][ T4772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.723148][ T4772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.730766][ T4772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.741420][ T4772] dummy0: left allmulticast mode [ 637.746529][ T4772] dummy0: left promiscuous mode [ 637.751473][ T4772] team0: left allmulticast mode [ 637.756417][ T4772] team_slave_0: left allmulticast mode [ 637.761917][ T4772] team_slave_1: left allmulticast mode [ 637.767484][ T4772] team0: left promiscuous mode [ 637.772538][ T4772] team_slave_0: left promiscuous mode [ 637.778040][ T4772] team_slave_1: left promiscuous mode [ 637.783500][ T4772] veth1_macvtap: left promiscuous mode [ 637.789008][ T4772] veth0_macvtap: left promiscuous mode [ 637.794508][ T4772] veth1_vlan: left promiscuous mode [ 637.799726][ T4772] veth0_vlan: left promiscuous mode [ 637.928593][ T4772] team0 (unregistering): Port device team_slave_1 removed [ 637.939469][ T4772] team0 (unregistering): Port device team_slave_0 removed [ 638.044503][T25143] chnl_net:caif_netlink_parms(): no params data found [ 638.082505][T25143] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.089791][T25143] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.097127][T25143] bridge_slave_0: entered allmulticast mode [ 638.103788][T25143] bridge_slave_0: entered promiscuous mode [ 638.110831][T25143] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.117941][T25143] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.125796][T25143] bridge_slave_1: entered allmulticast mode [ 638.132355][T25143] bridge_slave_1: entered promiscuous mode [ 638.153600][T25143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.164747][T25143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.186860][T25143] team0: Port device team_slave_0 added [ 638.195123][T25143] team0: Port device team_slave_1 added [ 638.216782][T25143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.223864][T25143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.249904][T25143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.263451][T25143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.270487][T25143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.296599][T25143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.343397][ T4772] IPVS: stop unused estimator thread 0... [ 638.354232][T25143] hsr_slave_0: entered promiscuous mode [ 638.360592][T25143] hsr_slave_1: entered promiscuous mode [ 638.367059][T25143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.374735][T25143] Cannot create hsr debugfs directory [ 638.600745][T25180] loop2: detected capacity change from 0 to 8192 [ 638.637363][T25143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.646441][T25143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.655405][T25143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.664639][T25143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 638.679860][T25143] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.686963][T25143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.694315][T25143] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.701406][T25143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.735710][T25143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.748795][ T3188] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.757298][ T3188] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.770058][T25143] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.785954][ T908] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.793204][ T908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.801652][ T908] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.808712][ T908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.881744][T25143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.939288][T25191] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 638.948704][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 638.974855][T25143] veth0_vlan: entered promiscuous mode [ 638.983477][T25143] veth1_vlan: entered promiscuous mode [ 639.001135][T25143] veth0_macvtap: entered promiscuous mode [ 639.008663][T25143] veth1_macvtap: entered promiscuous mode [ 639.019790][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.030401][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.040288][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.050758][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.060644][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.071308][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.081175][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.091668][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.101547][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.112065][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.121909][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.132479][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.142312][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.152788][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.164331][T25143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.176367][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.186853][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.196741][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.207261][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.217157][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.227752][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.237655][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.248200][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.258041][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.268506][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.278514][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.288942][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.298799][T25143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.309334][T25143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.320211][T25143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.331726][T25143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.340617][T25143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.349572][T25143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.358315][T25143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.459683][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 639.459700][ T29] audit: type=1326 audit(1719040954.896:17424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.490061][ T29] audit: type=1326 audit(1719040954.896:17425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.514492][ T29] audit: type=1326 audit(1719040954.896:17426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.538744][ T29] audit: type=1326 audit(1719040954.896:17427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.563165][ T29] audit: type=1326 audit(1719040954.896:17428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.587795][ T29] audit: type=1326 audit(1719040955.006:17429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.612043][ T29] audit: type=1326 audit(1719040955.006:17430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.636341][ T29] audit: type=1326 audit(1719040955.006:17431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.660687][ T29] audit: type=1326 audit(1719040955.006:17432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 639.685316][ T29] audit: type=1326 audit(1719040955.076:17433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7fc00000 [ 640.023561][T25217] netlink: 'syz-executor.1': attribute type 46 has an invalid length. [ 640.476751][T25230] 9pnet_fd: Insufficient options for proto=fd [ 640.786755][T25235] loop2: detected capacity change from 0 to 8192 [ 640.812902][T25235] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 640.942250][T25240] x_tables: duplicate underflow at hook 1 [ 640.949984][T25237] loop4: detected capacity change from 0 to 8192 [ 641.091660][T25246] loop3: detected capacity change from 0 to 128 [ 641.674662][T25270] wireguard0: entered promiscuous mode [ 641.680188][T25270] wireguard0: entered allmulticast mode [ 641.857138][T25275] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 641.884215][T25275] loop1: detected capacity change from 0 to 2048 [ 641.929574][T25275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.998094][T25275] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 642.015926][T25275] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 642.028501][T25275] EXT4-fs (loop1): This should not happen!! Data will be lost [ 642.028501][T25275] [ 642.152258][T25286] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 642.256935][T25143] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.604915][T25298] loop1: detected capacity change from 0 to 8192 [ 642.732661][T25303] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.742861][T25303] gretap0: entered promiscuous mode [ 642.758620][T25303] loop4: detected capacity change from 0 to 164 [ 642.776996][T25303] iso9660: Unknown parameter '' [ 643.390397][T25323] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 643.399818][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 643.905528][T25340] netlink: 4620 bytes leftover after parsing attributes in process `syz-executor.3'. [ 643.915158][T25340] openvswitch: netlink: Flow key attr not present in new flow. [ 644.061634][T25343] tc_dump_action: action bad kind [ 644.230760][T25345] chnl_net:caif_netlink_parms(): no params data found [ 644.284357][T25345] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.291567][T25345] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.298897][T25345] bridge_slave_0: entered allmulticast mode [ 644.305570][T25345] bridge_slave_0: entered promiscuous mode [ 644.312798][T25345] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.319903][T25345] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.327196][T25345] bridge_slave_1: entered allmulticast mode [ 644.333750][T25345] bridge_slave_1: entered promiscuous mode [ 644.357495][T25345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.368116][T25345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.389644][T25345] team0: Port device team_slave_0 added [ 644.396649][T25345] team0: Port device team_slave_1 added [ 644.414879][T25345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.422024][T25345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.448422][T25345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.459890][T25345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.467046][T25345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.493081][T25345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.523589][T25345] hsr_slave_0: entered promiscuous mode [ 644.529992][T25345] hsr_slave_1: entered promiscuous mode [ 644.540418][T25345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.548116][T25345] Cannot create hsr debugfs directory [ 644.618184][T25345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.674061][T25345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.733202][T25345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.757065][T25370] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 644.772740][T25370] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 644.800600][T25345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.860963][T25345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 644.869663][T25345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 644.879701][T25345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 644.888825][T25345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 644.912193][T25374] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 644.955368][T25345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.973021][T25345] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.478548][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.485682][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.495195][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.502304][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.631849][T25345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.742555][T25345] veth0_vlan: entered promiscuous mode [ 645.752413][T25345] veth1_vlan: entered promiscuous mode [ 645.777346][T25345] veth0_macvtap: entered promiscuous mode [ 645.785911][T25345] veth1_macvtap: entered promiscuous mode [ 645.799536][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.810127][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.820078][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.830946][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.840912][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.851410][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.861275][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.871802][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.881671][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.892235][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.902105][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.912586][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.922490][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.932958][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.942814][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.953374][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.965861][T25345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.985324][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.995943][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.005828][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.016309][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.026427][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.036966][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.046897][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.057357][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.057382][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.077692][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.077716][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.077736][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.077753][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.077766][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.077783][T25345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.077796][T25345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.120328][T25426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25426 comm=syz-executor.1 [ 646.131576][T25345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.175363][T25345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.184279][T25345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.193126][T25345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.201942][T25345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.561414][T25439] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 646.600937][T25440] wireguard0: entered promiscuous mode [ 646.606498][T25440] wireguard0: entered allmulticast mode [ 646.944857][ T29] audit: type=1326 audit(1719040962.373:17434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efff9587827 code=0x7ffc0000 [ 646.968952][ T29] audit: type=1326 audit(1719040962.373:17435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efff954d4e9 code=0x7ffc0000 [ 646.993120][ T29] audit: type=1326 audit(1719040962.373:17436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff958a0a9 code=0x7ffc0000 [ 647.019015][ T29] audit: type=1326 audit(1719040962.453:17437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff958a0a9 code=0x7ffc0000 [ 647.043235][ T29] audit: type=1326 audit(1719040962.453:17438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efff9587827 code=0x7ffc0000 [ 647.067311][ T29] audit: type=1326 audit(1719040962.453:17439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efff954d4e9 code=0x7ffc0000 [ 647.091326][ T29] audit: type=1326 audit(1719040962.453:17440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff958a0a9 code=0x7ffc0000 [ 647.119210][ T29] audit: type=1326 audit(1719040962.483:17441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff958a0a9 code=0x7ffc0000 [ 647.143469][ T29] audit: type=1326 audit(1719040962.483:17442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efff9587827 code=0x7ffc0000 [ 647.167575][ T29] audit: type=1326 audit(1719040962.483:17443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efff954d4e9 code=0x7ffc0000 [ 647.587022][T25457] loop2: detected capacity change from 0 to 512 [ 647.633295][T25457] ext2: Unknown parameter 'dont_appraise' [ 648.185078][T25473] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 648.243644][T25477] loop0: detected capacity change from 0 to 128 [ 648.272969][T25477] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4591: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 648.287714][T25477] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 648.307464][T25480] loop1: detected capacity change from 0 to 512 [ 648.332904][T25480] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 648.344863][T25480] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 2683928664 (level 1) [ 648.361285][T25480] EXT4-fs (loop1): 1 truncate cleaned up [ 648.369983][T25480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.383869][T25479] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz-executor.1: Invalid block bitmap block 3 in block_group 0 [ 649.738277][T25489] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 649.804976][T25143] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.157999][T25506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 650.287422][T25512] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 650.500488][T25515] loop0: detected capacity change from 0 to 8192 [ 651.075456][T25522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=25522 comm=syz-executor.0 [ 651.182404][T25524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25524 comm=syz-executor.2 [ 651.375253][T25536] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.400455][T25538] loop1: detected capacity change from 0 to 2048 [ 651.422877][T25538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 651.435256][T25538] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 651.531246][T25538] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 651.539605][T25538] System zones: 0-19 [ 651.547446][T25538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.561492][T25538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.429680][T25553] loop4: detected capacity change from 0 to 8192 [ 652.665560][T25558] loop0: detected capacity change from 0 to 1764 [ 652.687590][T25558] iso9660: Unknown parameter '-ap' [ 653.108301][T25569] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 653.728399][T25575] loop0: detected capacity change from 0 to 512 [ 654.577115][T25592] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 654.590767][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 654.590784][ T29] audit: type=1400 audit(1719040970.023:17622): avc: denied { write } for pid=25585 comm="syz-executor.4" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 654.749889][ T29] audit: type=1326 audit(1719040970.183:17623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25594 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7fc00000 [ 654.774831][ T29] audit: type=1326 audit(1719040970.183:17624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25594 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f747ea190a9 code=0x7fc00000 [ 654.996336][T25604] loop1: detected capacity change from 0 to 512 [ 655.016085][T25606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 655.036750][T25604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.049319][T25604] ext4 filesystem being mounted at /root/syzkaller-testdir1824980155/syzkaller.sPfD99/23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.885195][T25143] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.063807][T25630] usb usb8: usbfs: process 25630 (syz-executor.2) did not claim interface 0 before use [ 656.078107][ T29] audit: type=1400 audit(1719040971.513:17625): avc: denied { connect } for pid=25628 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 656.121376][T25630] loop2: detected capacity change from 0 to 512 [ 656.144568][T25630] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 656.152501][T25630] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 656.161052][T25630] System zones: 0-1, 15-15, 18-18, 34-34 [ 656.167158][T25630] EXT4-fs (loop2): orphan cleanup on readonly fs [ 656.173574][T25630] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 656.183059][T25630] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 656.197680][T25630] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 656.204863][T25630] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 16 [ 656.215370][T25630] ext4_test_bit(bit=15, block=18) = 1 [ 656.220756][T25630] is_bad_inode(inode)=0 [ 656.224949][T25630] NEXT_ORPHAN(inode)=0 [ 656.229080][T25630] max_ino=32 [ 656.232288][T25630] i_nlink=2 [ 656.236269][T25630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 656.284091][T25636] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 656.293436][T25637] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 656.310768][T25636] loop0: detected capacity change from 0 to 2048 [ 656.348755][T25636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.391348][T25345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.444587][T17764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.531889][T25645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 656.718763][T25653] loop1: detected capacity change from 0 to 164 [ 656.746667][T25653] iso9660: Unknown parameter '18446744073709551615' [ 656.896861][T25659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 657.023805][T25664] loop4: detected capacity change from 0 to 512 [ 657.045860][T25664] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: bad e_name length [ 657.060294][T25664] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 657.073626][T25664] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.159130][T25668] loop0: detected capacity change from 0 to 512 [ 657.174072][T24548] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 657.188226][T25668] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 657.199058][T25668] EXT4-fs (loop0): invalid journal inode [ 657.246435][ T29] audit: type=1326 audit(1719040972.683:17626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 657.285147][ T29] audit: type=1326 audit(1719040972.683:17627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 657.313015][ T29] audit: type=1326 audit(1719040972.683:17628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 657.337831][ T29] audit: type=1326 audit(1719040972.683:17629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 657.362646][ T29] audit: type=1326 audit(1719040972.683:17630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 657.824422][T25682] loop2: detected capacity change from 0 to 512 [ 657.855291][T25682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.870373][T25682] ext4 filesystem being mounted at /root/syzkaller-testdir22922478/syzkaller.sOvN3j/12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.968819][T25345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.406766][T25706] nfs4: Bad value for 'source' [ 658.684249][T25714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 658.696684][T25714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 658.713511][T25714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 658.770134][T25717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.833526][T25720] loop4: detected capacity change from 0 to 512 [ 658.885420][T25720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.898049][T25720] ext4 filesystem being mounted at /root/syzkaller-testdir1168946889/syzkaller.mar9b3/87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.173932][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.183400][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.242207][T25731] loop2: detected capacity change from 0 to 164 [ 659.261355][T25731] iso9660: Unknown parameter '' [ 659.315718][T25731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 659.329038][T25733] loop0: detected capacity change from 0 to 128 [ 659.654543][T25737] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 659.724335][T24548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.724610][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 659.724625][ T29] audit: type=1400 audit(1719040975.163:17653): avc: denied { connect } for pid=25738 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 659.740084][T25739] loop1: detected capacity change from 0 to 512 [ 659.786203][T25739] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 659.794473][T25739] EXT4-fs (loop1): orphan cleanup on readonly fs [ 659.801023][T25739] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 659.811385][T25739] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 659.826223][T25739] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 659.833145][T25739] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #16: comm syz-executor.1: iget: immutable or append flags not allowed on symlinks [ 659.847813][T25739] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 659.860486][T25739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 659.953331][T25143] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.165303][T25761] loop1: detected capacity change from 0 to 128 [ 660.313143][ T29] audit: type=1326 audit(1719040975.743:17654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25762 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff958a0a9 code=0x0 [ 660.393919][T25767] loop0: detected capacity change from 0 to 1024 [ 660.414364][T25767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.417253][T25769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 660.503639][T17764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.652133][T25776] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 660.709738][T25778] loop0: detected capacity change from 0 to 512 [ 660.785062][ T29] audit: type=1326 audit(1719040976.223:17655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81c45eb0a9 code=0x0 [ 660.948068][T25788] block device autoloading is deprecated and will be removed. [ 660.955941][T25788] bio_check_eod: 13 callbacks suppressed [ 660.955960][T25788] syz-executor.1: attempt to access beyond end of device [ 660.955960][T25788] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 660.976513][T25790] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 661.764653][ T29] audit: type=1326 audit(1719040977.173:17656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25804 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x0 [ 662.521820][T25819] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 662.593113][T25821] loop4: detected capacity change from 0 to 128 [ 662.690520][ T29] audit: type=1326 audit(1719040978.123:17657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25820 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff958a0a9 code=0x0 [ 663.000865][ T29] audit: type=1326 audit(1719040978.433:17658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25824 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x0 [ 663.102854][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 663.115566][T25826] macvtap8: entered promiscuous mode [ 663.121039][T25826] macvtap8: entered allmulticast mode [ 663.126555][T25826] dummy0: entered allmulticast mode [ 663.134647][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 663.144335][T25826] dummy0: left allmulticast mode [ 663.149483][T25826] macvtap8: left promiscuous mode [ 663.154702][T25826] macvtap8: left allmulticast mode [ 663.721229][T25835] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 664.682366][ T29] audit: type=1326 audit(1719040980.063:17659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.706573][ T29] audit: type=1326 audit(1719040980.073:17660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.730884][ T29] audit: type=1326 audit(1719040980.073:17661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f747ea17ca0 code=0x7ffc0000 [ 664.755051][ T29] audit: type=1326 audit(1719040980.073:17662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f747ea17ca0 code=0x7ffc0000 [ 664.779272][ T29] audit: type=1326 audit(1719040980.073:17663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.803472][ T29] audit: type=1326 audit(1719040980.073:17664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.827584][ T29] audit: type=1326 audit(1719040980.073:17665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.851864][ T29] audit: type=1326 audit(1719040980.073:17666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.876015][ T29] audit: type=1326 audit(1719040980.073:17667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.900150][ T29] audit: type=1326 audit(1719040980.073:17668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.924300][ T29] audit: type=1326 audit(1719040980.073:17669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.948583][ T29] audit: type=1326 audit(1719040980.073:17670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 664.948614][ T29] audit: type=1326 audit(1719040980.073:17671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747ea190a9 code=0x7ffc0000 [ 665.236879][T25857] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 665.256596][T25857] loop4: detected capacity change from 0 to 2048 [ 665.285412][T25857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.299471][T25857] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 665.315643][T25857] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 665.328155][T25857] EXT4-fs (loop4): This should not happen!! Data will be lost [ 665.328155][T25857] [ 665.391030][T24548] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.636504][T25871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 665.681917][T25873] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 665.889796][T25881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 665.910756][T25881] dummy0: entered promiscuous mode [ 665.920960][T25881] macvtap1: entered promiscuous mode [ 665.926422][T25881] macvtap1: entered allmulticast mode [ 665.931824][T25881] dummy0: entered allmulticast mode [ 666.282811][T25889] loop1: detected capacity change from 0 to 512 [ 666.850610][T25902] ================================================================== [ 666.859049][T25902] BUG: KCSAN: data-race in print_cpu / tick_nohz_idle_enter [ 666.866448][T25902] [ 666.868783][T25902] write to 0xffff888237c20538 of 8 bytes by task 0 on cpu 0: [ 666.876171][T25902] tick_nohz_idle_enter+0x89/0xe0 [ 666.881291][T25902] do_idle+0x3d/0x230 [ 666.885282][T25902] cpu_startup_entry+0x25/0x30 [ 666.890057][T25902] rest_init+0xef/0xf0 [ 666.894241][T25902] start_kernel+0x581/0x5e0 [ 666.898789][T25902] x86_64_start_reservations+0x2a/0x30 [ 666.904261][T25902] x86_64_start_kernel+0x94/0xa0 [ 666.909227][T25902] common_startup_64+0x12c/0x137 [ 666.914193][T25902] [ 666.916523][T25902] read to 0xffff888237c20538 of 8 bytes by task 25902 on cpu 1: [ 666.924162][T25902] print_cpu+0x4ed/0x670 [ 666.928420][T25902] timer_list_show+0x115/0x180 [ 666.933217][T25902] seq_read_iter+0x65b/0x940 [ 666.937828][T25902] proc_reg_read_iter+0x11e/0x190 [ 666.942868][T25902] copy_splice_read+0x3a4/0x5d0 [ 666.947740][T25902] splice_direct_to_actor+0x26c/0x670 [ 666.953133][T25902] do_splice_direct+0xd7/0x150 [ 666.957913][T25902] do_sendfile+0x3ab/0x960 [ 666.962332][T25902] __x64_sys_sendfile64+0x110/0x150 [ 666.967638][T25902] x64_sys_call+0x2c9f/0x2d70 [ 666.972352][T25902] do_syscall_64+0xc9/0x1c0 [ 666.976874][T25902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.982781][T25902] [ 666.985125][T25902] value changed: 0x0000009b42909be5 -> 0x0000009b42927536 [ 666.992234][T25902] [ 666.994579][T25902] Reported by Kernel Concurrency Sanitizer on: 2024/06/22 07:23:02 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 667.000728][T25902] CPU: 1 PID: 25902 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 667.011239][T25902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 667.021409][T25902] ==================================================================