last executing test programs: 6m18.277608692s ago: executing program 32 (id=250): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000270001"], 0x50}}, 0x0) 6m3.916287444s ago: executing program 33 (id=616): openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5m53.828954282s ago: executing program 34 (id=782): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = dup2(r0, r0) pread64(r1, &(0x7f0000001180)=""/208, 0xd0, 0x5) 5m45.523232133s ago: executing program 35 (id=903): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000580)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) pwrite64(r1, &(0x7f0000000300)='_', 0x1, 0x10000000005) ftruncate(r0, 0x8002007ffb) 5m33.71638757s ago: executing program 36 (id=1012): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2a8, 0x20a, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@local, [], @ipv4=@dev, [], @ipv4=@multicast1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 5m11.936253861s ago: executing program 37 (id=1434): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001980)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xa, 0x7ff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m35.429454898s ago: executing program 38 (id=4512): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, 0x0, 0x0) 2m34.287560499s ago: executing program 39 (id=4532): mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 2m33.649396814s ago: executing program 5 (id=4541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2m33.377682035s ago: executing program 5 (id=4544): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x5366}, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xc5, 0x1, 0xde, 0x40, 0x4bb, 0x901, 0x55ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6b, 0x3f, 0x1d}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2m33.377443785s ago: executing program 40 (id=4544): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x5366}, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xc5, 0x1, 0xde, 0x40, 0x4bb, 0x901, 0x55ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6b, 0x3f, 0x1d}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2m32.953616884s ago: executing program 41 (id=4553): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2m25.955326384s ago: executing program 42 (id=4701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a01040000000000000000020000003800048034000180090001006861736800000000240002800800024000000000080001400000000e080004400000000008000340000000370900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 2m18.90425719s ago: executing program 43 (id=4872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004480)=@newlink={0x60, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5, 0x21, 0x80}]}, 0x60}}, 0x0) 2m18.605570215s ago: executing program 44 (id=4882): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2ae, &(0x7f0000000b40)="$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") rename(0x0, &(0x7f00000001c0)='./file1\x00') 2m18.154490767s ago: executing program 45 (id=4892): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x5, 0x3b}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x7, 0x4}, 0xc) 2m13.642760629s ago: executing program 5 (id=4894): unshare(0x2000680) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000022c0)={@fallback=r1, 0x5, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000002280)=[0x0, 0x0, 0x0]}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002340)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="4bd657b0f1b2d32e0e8799afeddcf843cab01e37ff1d3152c273bf7f113fc6b424323e16acee0758b15bba83fd3d93fe2a12aebee81c74c7a9691d7536c3597fbac64076d89253a790a18276b66e61d5966173f3961073d1237b39457ff3efab6c3578627b73", @ANYRES8=r3, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x20) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x3, 0x20, 0xc0fc}, 0x2f) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m13.455536171s ago: executing program 5 (id=4953): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 2m13.414922926s ago: executing program 5 (id=4955): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 2m12.649560294s ago: executing program 46 (id=4963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a01040000000000000000020000003800048034000180090001006861736800000000240002800800024000000000080001400000000408000440000000"], 0x8c}}, 0x0) 2m11.803445172s ago: executing program 5 (id=4976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000010000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000003c000000060a010400000000000000000100000008000b40000000000900010073797a30000000"], 0xc4}}, 0x0) 2m11.803244332s ago: executing program 47 (id=4976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000010000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000003c000000060a010400000000000000000100000008000b40000000000900010073797a30000000"], 0xc4}}, 0x0) 2m10.454808019s ago: executing program 1 (id=5003): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept$inet6(r0, 0x0, 0x0) close(r2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 2m10.386489566s ago: executing program 1 (id=5005): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) 2m10.385638526s ago: executing program 1 (id=5008): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000400)) 2m10.305388766s ago: executing program 1 (id=5009): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 2m10.276896299s ago: executing program 1 (id=5011): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m9.941790228s ago: executing program 1 (id=5019): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x167) 2m9.941588878s ago: executing program 48 (id=5019): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x167) 1m22.042523073s ago: executing program 6 (id=7122): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) 1m22.032933154s ago: executing program 6 (id=7123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0xfffffffd, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x336, {0x7fffffff, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0xba01, 0x0, 0x4005}, 0x810) 1m22.012862236s ago: executing program 6 (id=7124): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) 1m21.986682359s ago: executing program 6 (id=7126): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000200)='.\x00', 0x170) 1m21.927349456s ago: executing program 6 (id=7128): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x1c, r0, 0x5, 0x70bd2a, 0x25dfdbfa, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1m21.783590632s ago: executing program 6 (id=7133): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1m21.743530707s ago: executing program 49 (id=7133): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 15.771878585s ago: executing program 7 (id=9158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x2f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000300)={0x78, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r5, &(0x7f0000ff8000/0x4000)=nil, 0x4000) 15.355616672s ago: executing program 7 (id=9162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 15.299292429s ago: executing program 7 (id=9166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r0, 0x0, 0x0) 15.270099292s ago: executing program 7 (id=9169): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@errors_remount}, {@jqfmt_vfsold}, {@data_err_abort}, {@norecovery}, {@norecovery}]}, 0x1, 0x4cd, &(0x7f0000000a00)="$eJzs3ctrXNcZAPBvZqyn1cp2S7FdqA0uuA+s0YNiqe2iXbVdGEoN3bTgqtJYVTXSCM3ItYShcrLzIouQkEDIIstA/oFkE69iAiHrZB+8CA6Jo0ASCEyYOzPy6DHKJJY8Qff3g+s595zr+c7R8B3dOXM1N4DUOl/7JxMxFBHvRsRwfXf7AefrD5sPb83UtkxUq1c/ziTH1fabhzb/3/GI2IiI/oj4258i/p3ZHbe8tr4wXSwWVhr7+cricr68tn5pfnF6rjBXWBqbvDw1NTk6MT51YGO988x/71x54y+9r33+9IN7z771Zq1bQ4221nEcpPrQe+JkS92xiPj9YQTrglxjPAPd7gjfSe31+1FEXEjyfzhyyasJpEG1Wq1+Ve1r17xRBY6sbHIOnMmORES9nM2OjNTP4X8cg9liqVz59fXS6tJs/Vz5RPRkr88XC6ON9wonoidT2x9Lyo/2x3fsT0Qk58DP5QaS/ZGZUnH2yU51wA7Hd+T/Z7l6/gMp4S0/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+kl/yH9JL/kEp/vXKltlWbf/8+e2NtdaF049Jsobwwsrg6MzJTWomRuVLf6509X7FUWh77TazezFcK5Uq+vLZ+bbG0ulS5Nr84PdcbhZ5DHg/QuZPn7r6fiYiN3w4kW01vo02uwtFW/X/9OwCA9Ml1ewICusbSH6SX9/jAHl/Ru01/u4blx4r6TWGBQ5TtdgeArrl4xud/kFbW/yG9rP9Dem0/x3c2AGnUnfV/oJus/0N6DbXc/yfTcv+vH7Tcu2s0In4YEe/levqa9/oCjoLsh5lG7l8c/vnQztbezBfJokBvRPzvpasv3JyuVFbGavWfbNVXXqzX93aj+0DHkvwdbzz6RQ4Aqbb58NZMc9uqPHH4cT/6Y/0ihN3xjzXWJvuTzygHNzPbrlXIHNC1Cxu3I+L0XvEzjfud1z/5GNzM7Yp/qvGYqT9F0t9jyX3THyf+/Vc7jX+mJf7PWuKffeyfCqTD3dr8M7pX/meTnI6t/Ns+/wwd0PXR7ee/7Nb8l2sz/53rMMZ/Xn7qftv4tyPO7hm/Ga8/ibUzfq1vFzuM/+Cff/9Ju7bqK/Xn2St+U62Urywu58tr65fmF6fnCnOFpbHJy1NTk6MT41P5ZI0631yp3u13p9+5t9/4B9vE32/8tbpfdjj+L3/69j/O7xP/Fxf2fv1P7RN/ICJ+1WH8T8c/+Fe7tlr82Tbjz+6M37LAV6ub6DB++fk/93V4KADwBJTX1hemi8XCioKCwrcsVIbrWfR96c9BFro9MwGH7VHSd7snAAAAAAAAAAAAQKcO7JrhP0Tbpm6PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKPg6AAD//029zuw=") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x20, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000, 0x1000000}]) 14.921093953s ago: executing program 7 (id=9179): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 14.817738315s ago: executing program 7 (id=9180): r0 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025", 0x1d}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 14.817629855s ago: executing program 50 (id=9180): r0 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025", 0x1d}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 9.346250348s ago: executing program 9 (id=9292): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x40000000010000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 9.268399917s ago: executing program 9 (id=9297): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 9.256240189s ago: executing program 9 (id=9298): write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xe2}]}}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 8.406135767s ago: executing program 9 (id=9306): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@errors_remount}, {@jqfmt_vfsold}, {@data_err_abort}, {@norecovery}, {@norecovery}]}, 0x1, 0x4cd, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x20, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000, 0x1000000}]) 8.009497213s ago: executing program 9 (id=9317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010062"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 7.280220387s ago: executing program 9 (id=9332): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x40000000010000, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 7.265604449s ago: executing program 51 (id=9332): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x40000000010000, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 2.003290678s ago: executing program 0 (id=9447): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") 1.999018899s ago: executing program 2 (id=9448): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000180)=')', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000400)='S', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x4, 0x3, 0x4, 0x101}, 0x14) 1.973384281s ago: executing program 4 (id=9450): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000000)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) 1.922998807s ago: executing program 8 (id=9451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.922714497s ago: executing program 2 (id=9452): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.789404973s ago: executing program 8 (id=9455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 1.773880505s ago: executing program 8 (id=9457): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x40}}, 0x0) 1.744538228s ago: executing program 8 (id=9459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x1b, 0x1c, &(0x7f0000000300)="544d17427ed16cbdfc782303adde275739ce413948bb7af0c2b2e1", &(0x7f0000000340)=""/28, 0x0, 0x0, 0xd9, 0x30, &(0x7f0000000380)="ddbb5c4d12a05ed2f7b39a4597e575cd6b681e1b4db10363a5de29cd928355f36859752800fcd34ee0c356d2428f561d5611212f7e77119bc206d4b3fed919c567002bc9eca8cf582ab80f494e781405a3ec3e533c3c8e5091e218a61b6342cc2ae45528cdf343b329cf6cb99975fe207920e29296de14f2e75a16de9362321dae8e956373fd67abedb63b5649f205a26df8805949e598bb69e3c88a6a76df7d07221139da3109e9ba7c22bc812700690d5335f5b681ead1b4c33d3a4dce9add58ca697e06147ac5745f688cfc0edb4fecdf76e51d96c0190f", &(0x7f00000004c0)="3c45954959ee1efe6a16fb9ff9dd8b5471910b491bbbfbac14e8be3a8fe7113f5106aca01c8de7edd37af6dcad0b1a91", 0x5, 0x0, 0x8}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffffa1}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ffff2abd7000fcdbdf2503000000a26d50a3cdc60cdb66e30e8990e2acd4489f859e09d3e3cf7a3e731b78b76451fa2a3a5e4bd15b53bf66391d43f3069de98eee176f9a36e209e9e818376b"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 1.102903462s ago: executing program 4 (id=9464): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.067913326s ago: executing program 0 (id=9465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 1.057213748s ago: executing program 4 (id=9466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.044573569s ago: executing program 2 (id=9467): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe2, 0x0) 1.008326734s ago: executing program 0 (id=9470): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) readv(r3, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 980.797797ms ago: executing program 2 (id=9471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x100000000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 966.688628ms ago: executing program 0 (id=9473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) 940.316191ms ago: executing program 4 (id=9474): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x1b, 0x1c, &(0x7f0000000300)="544d17427ed16cbdfc782303adde275739ce413948bb7af0c2b2e1", &(0x7f0000000340)=""/28, 0x0, 0x0, 0xd9, 0x30, &(0x7f0000000380)="ddbb5c4d12a05ed2f7b39a4597e575cd6b681e1b4db10363a5de29cd928355f36859752800fcd34ee0c356d2428f561d5611212f7e77119bc206d4b3fed919c567002bc9eca8cf582ab80f494e781405a3ec3e533c3c8e5091e218a61b6342cc2ae45528cdf343b329cf6cb99975fe207920e29296de14f2e75a16de9362321dae8e956373fd67abedb63b5649f205a26df8805949e598bb69e3c88a6a76df7d07221139da3109e9ba7c22bc812700690d5335f5b681ead1b4c33d3a4dce9add58ca697e06147ac5745f688cfc0edb4fecdf76e51d96c0190f", &(0x7f00000004c0)="3c45954959ee1efe6a16fb9ff9dd8b5471910b491bbbfbac14e8be3a8fe7113f5106aca01c8de7edd37af6dcad0b1a91", 0x5, 0x0, 0x8}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffffa1}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ffff2abd7000fcdbdf2503000000a26d50a3cdc60cdb66e30e8990e2acd4489f859e09d3e3cf7a3e731b78b76451fa2a3a5e4bd15b53bf66391d43f3069de98eee176f9a36e209e9e818376b"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 939.875742ms ago: executing program 0 (id=9476): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) 836.372443ms ago: executing program 0 (id=9477): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 835.929724ms ago: executing program 8 (id=9478): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) 753.861483ms ago: executing program 8 (id=9479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0xe8a, @loopback, 0x2}, 0x1c, 0x0}}], 0x2, 0x0) 735.350405ms ago: executing program 2 (id=9480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a300000000008"], 0x8c}}, 0x0) 688.67713ms ago: executing program 2 (id=9481): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 80.038781ms ago: executing program 3 (id=9483): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) readv(r3, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 67.138152ms ago: executing program 3 (id=9484): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003140), 0x800) r0 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 46.610985ms ago: executing program 3 (id=9485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 37.214556ms ago: executing program 4 (id=9486): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) creat(&(0x7f0000000280)='./file0\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x1000000, 0x2c, @empty, @mcast2, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 31.978846ms ago: executing program 3 (id=9487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 16.845578ms ago: executing program 4 (id=9488): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) 16.585868ms ago: executing program 3 (id=9489): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) 0s ago: executing program 3 (id=9490): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20044800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) kernel console output (not intermixed with test programs): 1][T24101] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.253410][T24925] bond_slave_0: entered promiscuous mode [ 353.259115][T24925] bond_slave_1: entered promiscuous mode [ 353.266883][T24925] macsec2: entered promiscuous mode [ 353.272104][T24925] bond0: entered promiscuous mode [ 353.277473][T24925] macsec2: entered allmulticast mode [ 353.282767][T24925] bond0: entered allmulticast mode [ 353.287970][T24925] bond_slave_0: entered allmulticast mode [ 353.293770][T24925] bond_slave_1: entered allmulticast mode [ 353.302646][T24924] netlink: 'syz.7.8153': attribute type 10 has an invalid length. [ 353.315182][T24924] team0: Device hsr_slave_0 failed to register rx_handler [ 353.353131][T24943] loop3: detected capacity change from 0 to 128 [ 353.410066][T24943] syz.3.8160[24943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.410127][T24943] syz.3.8160[24943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.424773][T24943] syz.3.8160[24943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.489361][T24966] macsec1: entered promiscuous mode [ 353.505999][T24966] bond0: entered promiscuous mode [ 353.511112][T24966] macsec1: entered allmulticast mode [ 353.516472][T24966] bond0: entered allmulticast mode [ 353.536125][T24962] loop8: detected capacity change from 0 to 136 [ 353.537332][T24971] loop9: detected capacity change from 0 to 136 [ 353.582783][T24972] wireguard0: entered promiscuous mode [ 353.588365][T24972] wireguard0: entered allmulticast mode [ 353.781284][T25006] loop8: detected capacity change from 0 to 136 [ 353.826202][T25012] loop7: detected capacity change from 0 to 136 [ 353.853787][T25012] can0: slcan on ttyS3. [ 353.947074][T25012] can0 (unregistered): slcan off ttyS3. [ 353.960303][T25012] Falling back ldisc for ttyS3. [ 353.985520][T25025] loop2: detected capacity change from 0 to 136 [ 354.018030][T25032] loop2: detected capacity change from 0 to 136 [ 354.493554][T25075] loop2: detected capacity change from 0 to 164 [ 354.499988][T25069] wireguard0: entered promiscuous mode [ 354.505566][T25069] wireguard0: entered allmulticast mode [ 354.509707][T25075] ISOFS: unable to read i-node block [ 354.565436][T25078] loop9: detected capacity change from 0 to 136 [ 354.650158][T25079] lo speed is unknown, defaulting to 1000 [ 354.793738][T25089] loop8: detected capacity change from 0 to 136 [ 354.851091][T25101] loop7: detected capacity change from 0 to 136 [ 354.891920][T25108] loop7: detected capacity change from 0 to 2048 [ 354.952449][T25114] tmpfs: Bad value for 'nr_inodes' [ 355.174811][T25116] wireguard0: entered promiscuous mode [ 355.180341][T25116] wireguard0: entered allmulticast mode [ 355.449868][T25135] loop8: detected capacity change from 0 to 136 [ 355.480239][T25146] loop3: detected capacity change from 0 to 512 [ 355.486887][T25146] EXT4-fs: Ignoring removed bh option [ 355.496349][T25146] EXT4-fs error (device loop3): __ext4_iget:4952: inode #15: block 1803188595: comm syz.3.8249: invalid block [ 355.527686][T25146] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.8249: couldn't read orphan inode 15 (err -117) [ 355.541066][T25146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.571520][T19437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.624026][T25171] loop2: detected capacity change from 0 to 136 [ 355.712225][T25174] wireguard0: entered promiscuous mode [ 355.717726][T25174] wireguard0: entered allmulticast mode [ 355.838295][T25184] loop7: detected capacity change from 0 to 136 [ 355.878435][T25189] vlan2: entered allmulticast mode [ 355.884114][T25191] loop2: detected capacity change from 0 to 512 [ 355.890755][T25191] EXT4-fs: Ignoring removed i_version option [ 355.897110][T25191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.905263][T25191] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.8264: bad orphan inode 1 [ 355.915823][T25191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.938218][T17598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.005823][T25196] loop7: detected capacity change from 0 to 512 [ 356.012360][T25196] EXT4-fs: Ignoring removed bh option [ 356.029316][T25196] EXT4-fs error (device loop7): __ext4_iget:4952: inode #15: block 1803188595: comm syz.7.8266: invalid block [ 356.041264][T25196] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.8266: couldn't read orphan inode 15 (err -117) [ 356.053779][T25196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.082797][T23374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.107027][T25202] loop2: detected capacity change from 0 to 1024 [ 356.113790][T25202] EXT4-fs: Ignoring removed orlov option [ 356.119588][T25202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.138129][T25202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.164822][T17598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.672686][T25230] loop3: detected capacity change from 0 to 136 [ 356.708762][T25230] can0: slcan on ttyS3. [ 356.765066][T25230] can0 (unregistered): slcan off ttyS3. [ 356.778427][T25230] Falling back ldisc for ttyS3. [ 356.993321][T25236] loop3: detected capacity change from 0 to 512 [ 357.009303][T25214] lo speed is unknown, defaulting to 1000 [ 357.031405][T25236] EXT4-fs: Ignoring removed bh option [ 357.054370][T25243] vlan2: entered allmulticast mode [ 357.063597][T25241] loop8: detected capacity change from 0 to 1024 [ 357.071363][T25236] EXT4-fs error (device loop3): __ext4_iget:4952: inode #15: block 1803188595: comm syz.3.8278: invalid block [ 357.075702][T25241] EXT4-fs: Ignoring removed orlov option [ 357.087680][T25236] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.8278: couldn't read orphan inode 15 (err -117) [ 357.088737][T25241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.102002][T25236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.128021][T25241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.142487][T19437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.179115][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.197337][T25256] netlink: 'syz.7.8284': attribute type 2 has an invalid length. [ 357.275653][T25214] chnl_net:caif_netlink_parms(): no params data found [ 357.377929][T25272] loop7: detected capacity change from 0 to 256 [ 357.430509][T25279] loop8: detected capacity change from 0 to 512 [ 357.437365][T25279] EXT4-fs: Ignoring removed bh option [ 357.450338][T25279] EXT4-fs error (device loop8): __ext4_iget:4952: inode #15: block 1803188595: comm syz.8.8292: invalid block [ 357.458773][T25282] loop7: detected capacity change from 0 to 136 [ 357.465043][T25279] EXT4-fs error (device loop8): ext4_orphan_get:1393: comm syz.8.8292: couldn't read orphan inode 15 (err -117) [ 357.486788][T25214] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.493989][T25214] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.504443][T25214] bridge_slave_0: entered allmulticast mode [ 357.512273][T25214] bridge_slave_0: entered promiscuous mode [ 357.512562][T25279] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.519368][T25214] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.537391][T25214] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.545733][T25214] bridge_slave_1: entered allmulticast mode [ 357.557649][T25214] bridge_slave_1: entered promiscuous mode [ 357.569860][T25282] can0: slcan on ttyS3. [ 357.576045][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.620835][T25214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.633482][T25214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.642716][T25283] can0 (unregistered): slcan off ttyS3. [ 357.648846][T25283] Falling back ldisc for ttyS3. [ 357.703675][T25214] team0: Port device team_slave_0 added [ 357.713524][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 357.713578][ T29] audit: type=1326 audit(1730282378.149:10114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25288 comm="syz.7.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 357.716569][T25214] team0: Port device team_slave_1 added [ 357.732538][ T29] audit: type=1326 audit(1730282378.149:10115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25288 comm="syz.7.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 357.774389][ T29] audit: type=1326 audit(1730282378.149:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25288 comm="syz.7.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 357.793659][T25294] syz.7.8299[25294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.798164][ T29] audit: type=1326 audit(1730282378.149:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25288 comm="syz.7.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 357.798916][T25294] syz.7.8299[25294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.838144][T25294] syz.7.8299[25294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.894328][T25214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.908554][T25306] loop9: detected capacity change from 0 to 2048 [ 357.912740][T25214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.945099][T25214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.956835][T25214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.963806][T25214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.989893][T25214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.091029][T25330] loop9: detected capacity change from 0 to 136 [ 358.125645][T25214] hsr_slave_0: entered promiscuous mode [ 358.139230][T25333] loop3: detected capacity change from 0 to 512 [ 358.151066][T25214] hsr_slave_1: entered promiscuous mode [ 358.246024][T25214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.253693][T25214] Cannot create hsr debugfs directory [ 358.264226][T25330] can0: slcan on ttyS3. [ 358.319051][T25333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 358.332505][T25333] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.343424][T25338] can0 (unregistered): slcan off ttyS3. [ 358.353631][T25338] Falling back ldisc for ttyS3. [ 358.422408][T25335] wireguard0: entered promiscuous mode [ 358.428115][T25335] wireguard0: entered allmulticast mode [ 358.497266][T19437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 358.596549][T25347] loop9: detected capacity change from 0 to 2048 [ 358.613218][T25214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.623547][T25214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 358.722286][ T29] audit: type=1326 audit(1730282379.149:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 358.755405][ T29] audit: type=1326 audit(1730282379.189:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 358.779118][ T29] audit: type=1326 audit(1730282379.189:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 358.803274][ T29] audit: type=1326 audit(1730282379.189:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 358.827174][ T29] audit: type=1326 audit(1730282379.189:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25348 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 358.854409][T25214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.864881][T25214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 358.920579][T25214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.931132][T25214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 358.968025][ T29] audit: type=1326 audit(1730282379.389:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25365 comm="syz.9.8330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x0 [ 358.998703][T25214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.009299][T25214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.112905][T25214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.130610][T25214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.142504][T25214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.153208][T25214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.253004][T25214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.279895][T25214] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.297849][T14203] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.304985][T14203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.341519][T14203] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.348775][T14203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.536017][T25383] loop8: detected capacity change from 0 to 512 [ 359.560500][T25383] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8335: bg 0: block 248: padding at end of block bitmap is not set [ 359.564950][T25214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.577701][T25383] EXT4-fs error (device loop8): ext4_acquire_dquot:6879: comm syz.8.8335: Failed to acquire dquot type 1 [ 359.598544][T25383] EXT4-fs (loop8): 1 truncate cleaned up [ 359.606002][T25383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.619433][T25383] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.680271][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.682350][T25214] veth0_vlan: entered promiscuous mode [ 359.703040][T25214] veth1_vlan: entered promiscuous mode [ 359.734085][T25214] veth0_macvtap: entered promiscuous mode [ 359.742424][T25214] veth1_macvtap: entered promiscuous mode [ 359.757642][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.768152][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.777992][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.788511][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.798358][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.808882][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.818818][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.827828][T25403] loop9: detected capacity change from 0 to 136 [ 359.829246][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.845327][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.855760][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.865655][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.876100][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.885922][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.896339][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.908137][T25214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.920603][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.931117][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.941007][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.951893][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.961999][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.972529][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.982477][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.992929][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.002791][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.013253][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.023096][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.033559][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.043455][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.053895][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.063722][T25214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.074267][T25214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.099983][T25214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.122174][T25413] __nla_validate_parse: 9 callbacks suppressed [ 360.122196][T25413] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8343'. [ 360.148623][T25214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.157408][T25214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.166163][T25214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.174889][T25214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.204554][T25420] loop8: detected capacity change from 0 to 512 [ 360.248302][T25420] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8345: bg 0: block 248: padding at end of block bitmap is not set [ 360.266379][T25420] EXT4-fs error (device loop8): ext4_acquire_dquot:6879: comm syz.8.8345: Failed to acquire dquot type 1 [ 360.279928][T25420] EXT4-fs (loop8): 1 truncate cleaned up [ 360.286407][T25420] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.300214][T25420] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.306646][T25429] ipip0: entered promiscuous mode [ 360.354299][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.442221][T25439] ipip0: entered promiscuous mode [ 360.529999][T25449] loop7: detected capacity change from 0 to 1024 [ 360.530388][T25450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8355'. [ 360.537135][T25449] EXT4-fs: Ignoring removed bh option [ 360.556760][T25449] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 360.567383][T25449] System zones: 0-1, 3-12 [ 360.574176][T25449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.591484][T25457] loop2: detected capacity change from 0 to 136 [ 360.777428][T25479] IPv6: addrconf: prefix option has invalid lifetime [ 360.784179][T25479] IPv6: addrconf: prefix option has invalid lifetime [ 360.812084][T23374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.991447][T25494] loop3: detected capacity change from 0 to 512 [ 361.207977][T25497] loop7: detected capacity change from 0 to 512 [ 361.370869][T25494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 361.383587][T25494] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.448293][T25497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 361.460996][T25497] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.506294][T25512] loop8: detected capacity change from 0 to 256 [ 361.594316][T25520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8380'. [ 361.596711][T19437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 361.608164][T25522] loop9: detected capacity change from 0 to 128 [ 361.621358][T25522] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.630819][T25525] loop3: detected capacity change from 0 to 1024 [ 361.638029][T25520] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.640653][T25525] EXT4-fs: Ignoring removed bh option [ 361.648659][T25520] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.655236][T25522] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.662733][T25520] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.681752][T25520] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.691550][T25520] vxlan0: entered promiscuous mode [ 361.737877][T25525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 361.738228][T23374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 361.746847][T25525] System zones: 0-1, 3-12 [ 361.761664][T25525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.777672][T24101] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.874766][T25539] IPv6: addrconf: prefix option has invalid lifetime [ 361.881479][T25539] IPv6: addrconf: prefix option has invalid lifetime [ 361.923748][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8390'. [ 361.948321][T19437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.952707][T25551] loop7: detected capacity change from 0 to 128 [ 361.973951][T25551] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.989534][T25551] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.010669][T25560] loop3: detected capacity change from 0 to 136 [ 362.038249][T25560] can0: slcan on ttyS3. [ 362.044833][T23374] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.061038][T25570] IPv6: addrconf: prefix option has invalid lifetime [ 362.067768][T25570] IPv6: addrconf: prefix option has invalid lifetime [ 362.074927][T25560] can0 (unregistered): slcan off ttyS3. [ 362.080947][T25575] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8400'. [ 362.090302][T25560] Falling back ldisc for ttyS3. [ 362.102124][T25575] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.111037][T25575] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.119846][T25575] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.128986][T25575] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.139478][T25575] vxlan0: entered promiscuous mode [ 362.429222][T25603] IPv6: addrconf: prefix option has invalid lifetime [ 362.436102][T25603] IPv6: addrconf: prefix option has invalid lifetime [ 362.554664][T25610] loop9: detected capacity change from 0 to 512 [ 362.559567][T25608] lo speed is unknown, defaulting to 1000 [ 362.598534][T25610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 362.613658][T25610] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.672377][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 362.709074][T25624] loop9: detected capacity change from 0 to 136 [ 362.728212][T25624] can0: slcan on ttyS3. [ 362.797111][ T29] kauditd_printk_skb: 2287 callbacks suppressed [ 362.797126][ T29] audit: type=1326 audit(1730282383.229:12407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 362.827049][ T29] audit: type=1326 audit(1730282383.229:12408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 362.850639][T25624] can0 (unregistered): slcan off ttyS3. [ 362.850848][T25624] Falling back ldisc for ttyS3. [ 362.856253][ T29] audit: type=1326 audit(1730282383.229:12409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 362.884796][ T29] audit: type=1326 audit(1730282383.229:12410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 362.908382][ T29] audit: type=1326 audit(1730282383.229:12411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 362.931961][ T29] audit: type=1326 audit(1730282383.229:12412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 362.955622][ T29] audit: type=1326 audit(1730282383.229:12413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 362.979291][ T29] audit: type=1326 audit(1730282383.229:12414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 363.002944][ T29] audit: type=1326 audit(1730282383.229:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 363.026425][ T29] audit: type=1326 audit(1730282383.229:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25641 comm="syz.2.8432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6424ee719 code=0x7ffc0000 [ 363.071668][T25661] lo speed is unknown, defaulting to 1000 [ 363.083525][T25663] 9pnet_fd: Insufficient options for proto=fd [ 363.386327][T25683] loop9: detected capacity change from 0 to 136 [ 363.533816][T25702] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8459'. [ 363.723218][T25718] loop2: detected capacity change from 0 to 512 [ 363.956551][T25720] loop7: detected capacity change from 0 to 512 [ 364.134794][T25720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 364.147477][T25720] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.169720][T25718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 364.182450][T25718] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.256061][T25730] loop9: detected capacity change from 0 to 512 [ 364.278396][T25730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 364.291017][T25730] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.377611][T25214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 364.513124][T23374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 364.635019][T25741] loop3: detected capacity change from 0 to 1024 [ 364.642398][T25741] EXT4-fs: Ignoring removed bh option [ 364.657698][T25741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 364.668377][T25741] System zones: 0-1, 3-12 [ 364.675779][T25741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.680684][T25752] loop2: detected capacity change from 0 to 1024 [ 364.701969][T25752] EXT4-fs: Ignoring removed bh option [ 364.722186][T25752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 364.728408][T25758] loop8: detected capacity change from 0 to 1024 [ 364.731140][T25752] System zones: 0-1, 3-12 [ 364.740534][T25758] EXT4-fs: Ignoring removed bh option [ 364.741693][T25752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.770579][T25758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 364.779772][T25758] System zones: 0-1, 3-12 [ 364.789319][T25758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.812824][T25214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.824386][T19437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.872923][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.924504][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 365.248824][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8477'. [ 365.273237][T25774] loop9: detected capacity change from 0 to 136 [ 365.290724][T25774] can0: slcan on ttyS3. [ 365.364663][T25778] loop8: detected capacity change from 0 to 136 [ 365.414918][T25779] can0 (unregistered): slcan off ttyS3. [ 365.420667][T25779] Falling back ldisc for ttyS3. [ 365.648642][T25805] loop3: detected capacity change from 0 to 256 [ 365.677076][T25806] loop8: detected capacity change from 0 to 512 [ 365.779402][T25810] loop2: detected capacity change from 0 to 136 [ 365.875844][T25806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 365.888560][T25806] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.996477][T25818] loop2: detected capacity change from 0 to 136 [ 366.010694][T25818] can0: slcan on ttyS3. [ 366.023502][T25822] loop3: detected capacity change from 0 to 2048 [ 366.044778][T25818] can0 (unregistered): slcan off ttyS3. [ 366.050387][T25818] Falling back ldisc for ttyS3. [ 366.081935][T25828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8500'. [ 366.292911][T25842] loop7: detected capacity change from 0 to 256 [ 366.388552][T25845] loop2: detected capacity change from 0 to 128 [ 366.396456][T25845] EXT4-fs: test_dummy_encryption option not supported [ 366.440938][T25847] loop9: detected capacity change from 0 to 2048 [ 366.518090][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 366.650025][T25853] loop8: detected capacity change from 0 to 136 [ 366.721907][T25853] can0: slcan on ttyS3. [ 366.759733][T25860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8513'. [ 366.768736][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8513'. [ 366.825014][T25853] can0 (unregistered): slcan off ttyS3. [ 366.834458][T25853] Falling back ldisc for ttyS3. [ 366.864007][T25866] loop9: detected capacity change from 0 to 136 [ 367.013368][T25885] loop7: detected capacity change from 0 to 256 [ 367.525540][T25884] loop3: detected capacity change from 0 to 512 [ 367.535449][T25892] loop8: detected capacity change from 0 to 512 [ 367.586606][T25892] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.660476][T25884] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.842186][ T29] kauditd_printk_skb: 845 callbacks suppressed [ 367.842204][ T29] audit: type=1326 audit(1730282388.249:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 367.872196][ T29] audit: type=1326 audit(1730282388.249:13263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 367.895801][ T29] audit: type=1326 audit(1730282388.259:13264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 367.919498][ T29] audit: type=1326 audit(1730282388.259:13265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 367.922928][T25907] loop2: detected capacity change from 0 to 256 [ 367.943082][ T29] audit: type=1326 audit(1730282388.259:13266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 367.943108][ T29] audit: type=1326 audit(1730282388.259:13267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 367.949743][T25907] vfat: Unknown parameter ']' [ 367.972909][ T29] audit: type=1326 audit(1730282388.259:13268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 368.024871][ T29] audit: type=1326 audit(1730282388.259:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 368.048530][ T29] audit: type=1326 audit(1730282388.259:13270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 368.072184][ T29] audit: type=1326 audit(1730282388.259:13271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25883 comm="syz.7.8524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7fc00000 [ 368.217583][T25917] loop8: detected capacity change from 0 to 136 [ 368.343016][T25927] IPv6: addrconf: prefix option has invalid lifetime [ 368.349848][T25927] IPv6: addrconf: prefix option has invalid lifetime [ 368.408369][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8537'. [ 368.417346][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8537'. [ 368.595368][T25940] loop3: detected capacity change from 0 to 256 [ 368.752560][T25958] IPv6: addrconf: prefix option has invalid lifetime [ 368.759311][T25958] IPv6: addrconf: prefix option has invalid lifetime [ 368.806939][T25964] loop8: detected capacity change from 0 to 136 [ 369.039043][T25990] wireguard0: entered promiscuous mode [ 369.044567][T25990] wireguard0: entered allmulticast mode [ 369.045612][T25992] IPv6: addrconf: prefix option has invalid lifetime [ 369.056829][T25992] IPv6: addrconf: prefix option has invalid lifetime [ 369.502181][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8578'. [ 369.511139][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8578'. [ 369.584809][T26032] loop8: detected capacity change from 0 to 164 [ 369.603899][T26032] ISOFS: unable to read i-node block [ 369.816736][T26052] lo speed is unknown, defaulting to 1000 [ 370.373801][T26069] loop3: detected capacity change from 0 to 512 [ 370.535966][T26069] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.641674][T26079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8595'. [ 370.918720][T26093] lo speed is unknown, defaulting to 1000 [ 371.128412][T26107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8607'. [ 371.145918][T26107] ipip0: entered promiscuous mode [ 371.220497][T26115] loop3: detected capacity change from 0 to 256 [ 371.227117][T26115] vfat: Unknown parameter '^ÿÿ' [ 371.307997][T26128] ------------[ cut here ]------------ [ 371.313509][T26128] refcount_t: underflow; use-after-free. [ 371.319537][T26128] WARNING: CPU: 0 PID: 26128 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 371.329114][T26128] Modules linked in: [ 371.333020][T26128] CPU: 0 UID: 0 PID: 26128 Comm: syz.2.8612 Not tainted 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 371.343813][T26128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.353977][T26128] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 371.360160][T26128] Code: 72 ff ff ff e8 ab 7e 71 ff 48 c7 c7 7e d7 b2 86 e8 ff 64 8a ff c6 05 76 25 f4 04 01 90 48 c7 c7 fc a9 1b 86 e8 1b 42 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 7c 7e 71 ff 48 c7 c7 7b d7 b2 86 e8 [ 371.379801][T26128] RSP: 0018:ffffc900029fbb38 EFLAGS: 00010246 [ 371.385904][T26128] RAX: 55d253b2a64fdf00 RBX: ffff88810aaf6ce4 RCX: 0000000000040000 [ 371.393986][T26128] RDX: ffffc90002e3c000 RSI: 000000000000447f RDI: 0000000000004480 [ 371.401988][T26128] RBP: 0000000000000003 R08: ffffffff8111f597 R09: 0000000000000000 [ 371.410332][T26128] R10: 0001ffffffffffff R11: ffff888108dde300 R12: ffff888113f9ac68 [ 371.418331][T26128] R13: ffff888117ae5b88 R14: ffff88810aaf6ce4 R15: 0000000000000000 [ 371.426348][T26128] FS: 00007fc6411406c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 371.435326][T26128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.441915][T26128] CR2: 00000000200ca030 CR3: 0000000112722000 CR4: 00000000003506f0 [ 371.449928][T26128] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 371.457962][T26128] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 371.466071][T26128] Call Trace: [ 371.469353][T26128] [ 371.472290][T26128] ? __warn+0x141/0x350 [ 371.476487][T26128] ? report_bug+0x315/0x420 [ 371.481006][T26128] ? refcount_warn_saturate+0x1c6/0x230 [ 371.486586][T26128] ? handle_bug+0x60/0x90 [ 371.490925][T26128] ? exc_invalid_op+0x1a/0x50 [ 371.495745][T26128] ? asm_exc_invalid_op+0x1a/0x20 [ 371.500860][T26128] ? __warn_printk+0x167/0x1b0 [ 371.505824][T26128] ? refcount_warn_saturate+0x1c6/0x230 [ 371.511384][T26128] ? refcount_warn_saturate+0x1c5/0x230 [ 371.517084][T26128] sk_skb_reason_drop+0xe9/0x290 [ 371.522109][T26128] j1939_session_put+0x157/0x2a0 [ 371.527078][T26128] j1939_sk_netdev_event_netdown+0x159/0x1d0 [ 371.533139][T26128] j1939_netdev_notify+0x142/0x1b0 [ 371.538389][T26128] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 371.544032][T26128] raw_notifier_call_chain+0x6f/0x1d0 [ 371.549434][T26128] call_netdevice_notifiers_info+0xae/0x100 [ 371.555428][T26128] __dev_notify_flags+0xff/0x1a0 [ 371.560373][T26128] dev_change_flags+0xab/0xd0 [ 371.565110][T26128] dev_ifsioc+0x67f/0xa10 [ 371.569460][T26128] dev_ioctl+0x7fa/0xab0 [ 371.573818][T26128] sock_do_ioctl+0x11c/0x260 [ 371.578441][T26128] sock_ioctl+0x46a/0x640 [ 371.582779][T26128] ? __pfx_sock_ioctl+0x10/0x10 [ 371.587658][T26128] __se_sys_ioctl+0xcd/0x140 [ 371.592317][T26128] __x64_sys_ioctl+0x43/0x50 [ 371.596947][T26128] x64_sys_call+0x15cc/0x2d60 [ 371.601637][T26128] do_syscall_64+0xc9/0x1c0 [ 371.606201][T26128] ? clear_bhb_loop+0x55/0xb0 [ 371.610891][T26128] ? clear_bhb_loop+0x55/0xb0 [ 371.615598][T26128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.621558][T26128] RIP: 0033:0x7fc6424ee719 [ 371.626025][T26128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.645738][T26128] RSP: 002b:00007fc641140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.654170][T26128] RAX: ffffffffffffffda RBX: 00007fc6426a6058 RCX: 00007fc6424ee719 [ 371.662205][T26128] RDX: 0000000020000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 371.670228][T26128] RBP: 00007fc64256132e R08: 0000000000000000 R09: 0000000000000000 [ 371.678237][T26128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.686239][T26128] R13: 0000000000000000 R14: 00007fc6426a6058 R15: 00007ffcefe61788 [ 371.694300][T26128] [ 371.697366][T26128] ---[ end trace 0000000000000000 ]--- [ 371.772864][T26136] lo speed is unknown, defaulting to 1000 [ 372.159387][T26169] loop2: detected capacity change from 0 to 512 [ 372.219398][T26176] loop7: detected capacity change from 0 to 512 [ 372.230258][T26169] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.337660][T26179] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8632'. [ 372.350476][T26176] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8633: bg 0: block 248: padding at end of block bitmap is not set [ 372.371388][T26179] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.380310][T26179] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.389108][T26179] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.397845][T26179] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.407640][T26179] vxlan0: entered promiscuous mode [ 372.426800][T26176] EXT4-fs error (device loop7): ext4_acquire_dquot:6879: comm syz.7.8633: Failed to acquire dquot type 1 [ 372.442717][T26176] EXT4-fs (loop7): 1 truncate cleaned up [ 372.457527][T26176] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.531955][T26194] lo speed is unknown, defaulting to 1000 [ 372.554739][T26190] wireguard0: entered promiscuous mode [ 372.560329][T26190] wireguard0: entered allmulticast mode [ 372.860904][T26217] loop2: detected capacity change from 0 to 128 [ 372.867668][T26217] EXT4-fs: test_dummy_encryption option not supported [ 373.109999][T26228] loop3: detected capacity change from 0 to 1024 [ 373.116690][T26228] EXT4-fs: Ignoring removed bh option [ 373.136912][T26228] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 373.145218][T26228] System zones: 0-1, 3-12 [ 373.202773][T26232] loop9: detected capacity change from 0 to 512 [ 373.235012][T26232] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.546411][T26244] lo speed is unknown, defaulting to 1000 [ 373.569235][T26250] loop7: detected capacity change from 0 to 256 [ 373.624792][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 373.624806][ T29] audit: type=1326 audit(1730282394.049:13786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.654820][ T29] audit: type=1326 audit(1730282394.059:13787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.678485][ T29] audit: type=1326 audit(1730282394.059:13788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.702810][ T29] audit: type=1326 audit(1730282394.059:13789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.726418][ T29] audit: type=1326 audit(1730282394.059:13790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.750074][ T29] audit: type=1326 audit(1730282394.059:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.773654][ T29] audit: type=1326 audit(1730282394.059:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.797276][ T29] audit: type=1326 audit(1730282394.059:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.820915][ T29] audit: type=1326 audit(1730282394.059:13794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 373.844383][ T29] audit: type=1326 audit(1730282394.059:13795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26249 comm="syz.7.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 374.137746][T26285] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8661'. [ 374.605760][T26294] lo speed is unknown, defaulting to 1000 [ 374.663244][T26296] loop3: detected capacity change from 0 to 136 [ 374.840422][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8677'. [ 374.845215][T26301] loop3: detected capacity change from 0 to 128 [ 374.861877][T26300] vlan2: entered allmulticast mode [ 374.921029][T26287] wireguard0: entered promiscuous mode [ 374.922753][T26301] syz.3.8676[26301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.926607][T26301] syz.3.8676[26301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.926567][T26287] wireguard0: entered allmulticast mode [ 374.938519][T26301] syz.3.8676[26301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.011270][T26321] loop2: detected capacity change from 0 to 136 [ 375.045097][T26324] loop2: detected capacity change from 0 to 256 [ 375.127788][T26329] ebt_among: dst integrity fail: 101 [ 375.155981][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8690'. [ 375.180858][T26336] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8692'. [ 375.276107][T26345] loop9: detected capacity change from 0 to 1024 [ 375.284520][T26345] EXT4-fs: Ignoring removed bh option [ 375.325049][T26345] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 375.333153][T26345] System zones: 0-1, 3-12 [ 375.374574][T26352] loop7: detected capacity change from 0 to 136 [ 375.390553][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8699'. [ 375.677338][T26390] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8712'. [ 375.734448][T26400] netlink: 'syz.2.8718': attribute type 4 has an invalid length. [ 375.854756][T26417] loop7: detected capacity change from 0 to 128 [ 375.865868][T26406] loop3: detected capacity change from 0 to 512 [ 375.909860][T26417] syz.7.8725[26417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.909915][T26417] syz.7.8725[26417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.910300][T26406] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.921410][T26417] syz.7.8725[26417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.935306][T26423] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8726'. [ 376.286907][T26448] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8737'. [ 376.471686][T26457] loop9: detected capacity change from 0 to 256 [ 376.478746][T26457] vfat: Unknown parameter '~ÿÿ' [ 376.727280][T26472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8746'. [ 376.998576][T26495] loop8: detected capacity change from 0 to 136 [ 377.010072][T26495] can0: slcan on ttyS3. [ 377.067945][T26496] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8751'. [ 377.084898][T26495] can0 (unregistered): slcan off ttyS3. [ 377.090805][T26495] Falling back ldisc for ttyS3. [ 377.181528][T26499] loop8: detected capacity change from 0 to 164 [ 377.201202][T26499] ISOFS: unable to read i-node block [ 377.604158][T26501] lo speed is unknown, defaulting to 1000 [ 377.894144][T26512] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8763'. [ 377.975982][T26524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8768'. [ 378.332881][T26591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8797'. [ 378.480377][T26613] netlink: 2048 bytes leftover after parsing attributes in process `syz.8.8807'. [ 378.489654][T26613] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8807'. [ 378.629558][T26621] loop7: detected capacity change from 0 to 2048 [ 378.923402][T26648] loop7: detected capacity change from 0 to 128 [ 378.926159][ T29] kauditd_printk_skb: 1843 callbacks suppressed [ 378.926173][ T29] audit: type=1326 audit(1730282399.349:15639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26645 comm="syz.2.8823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6424ee719 code=0x0 [ 378.930111][T26648] EXT4-fs: test_dummy_encryption option not supported [ 378.946037][T26644] loop9: detected capacity change from 0 to 2048 [ 379.473496][T26678] loop9: detected capacity change from 0 to 512 [ 379.483610][T26677] loop8: detected capacity change from 0 to 2048 [ 379.492888][T26678] EXT4-fs mount: 18 callbacks suppressed [ 379.492900][T26678] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 379.511089][T26678] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.810923][T26704] loop2: detected capacity change from 0 to 136 [ 379.821501][T26706] loop8: detected capacity change from 0 to 256 [ 379.834560][T26704] can0: slcan on ttyS3. [ 379.846466][T26708] loop7: detected capacity change from 0 to 2048 [ 379.854886][T26704] can0 (unregistered): slcan off ttyS3. [ 379.860536][T26704] Falling back ldisc for ttyS3. [ 379.892986][ T29] audit: type=1326 audit(1730282400.319:15640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 379.930284][ T29] audit: type=1326 audit(1730282400.329:15641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 379.953953][ T29] audit: type=1326 audit(1730282400.329:15642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 379.977628][ T29] audit: type=1326 audit(1730282400.329:15643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 380.001229][ T29] audit: type=1326 audit(1730282400.329:15644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 380.025543][ T29] audit: type=1326 audit(1730282400.329:15645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 380.049192][ T29] audit: type=1326 audit(1730282400.329:15646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 380.072770][ T29] audit: type=1326 audit(1730282400.329:15647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 380.096336][ T29] audit: type=1326 audit(1730282400.329:15648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.8.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e2fb5e719 code=0x7ffc0000 [ 380.185201][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 380.298470][T26749] loop9: detected capacity change from 0 to 2048 [ 380.336029][T26749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.356794][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.375321][T26753] loop9: detected capacity change from 0 to 256 [ 381.013253][T26791] __nla_validate_parse: 3 callbacks suppressed [ 381.013267][T26791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8883'. [ 381.568160][T26814] loop8: detected capacity change from 0 to 512 [ 381.720752][T26814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 381.733478][T26814] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.341774][T26834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8898'. [ 382.412384][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 382.459040][T26840] vlan2: entered allmulticast mode [ 382.599048][T26848] loop8: detected capacity change from 0 to 512 [ 382.616321][T26848] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.629035][T26848] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.741386][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.780040][T26855] netlink: 'syz.7.8906': attribute type 4 has an invalid length. [ 383.308526][T26865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8910'. [ 383.498086][T26880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8917'. [ 383.513407][T26880] ipip0: entered promiscuous mode [ 383.700981][T26890] loop7: detected capacity change from 0 to 512 [ 383.861242][T26893] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8921'. [ 383.970113][T26890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 384.068131][T26890] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.150135][T26904] loop8: detected capacity change from 0 to 512 [ 384.199238][T26904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 384.262390][T26904] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.579358][T26925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8932'. [ 384.665421][T26927] loop3: detected capacity change from 0 to 512 [ 384.710378][T26927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.735091][T26927] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.810563][T26927] 9pnet_fd: Insufficient options for proto=fd [ 384.860402][T19437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.862309][T26935] loop9: detected capacity change from 0 to 256 [ 385.032777][ T29] kauditd_printk_skb: 2311 callbacks suppressed [ 385.032795][ T29] audit: type=1326 audit(1730282405.449:17960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.062768][ T29] audit: type=1326 audit(1730282405.449:17961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.086471][ T29] audit: type=1326 audit(1730282405.449:17962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.110099][ T29] audit: type=1326 audit(1730282405.449:17963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.118439][T23374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 385.133715][ T29] audit: type=1326 audit(1730282405.449:17964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.166299][ T29] audit: type=1326 audit(1730282405.449:17965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.190113][ T29] audit: type=1326 audit(1730282405.449:17966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.213747][ T29] audit: type=1326 audit(1730282405.449:17967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.237329][ T29] audit: type=1326 audit(1730282405.449:17968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.261003][ T29] audit: type=1326 audit(1730282405.449:17969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26934 comm="syz.9.8936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 385.287931][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 385.336900][T26944] random: crng reseeded on system resumption [ 385.631845][T26952] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8939'. [ 385.966880][T26961] netlink: 'syz.9.8944': attribute type 2 has an invalid length. [ 385.983376][T26963] loop2: detected capacity change from 0 to 128 [ 386.023858][T26955] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8940'. [ 386.099425][T26982] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8953'. [ 386.339663][T26998] loop2: detected capacity change from 0 to 128 [ 386.377374][T27000] loop2: detected capacity change from 0 to 128 [ 386.414863][T27000] syz.2.8961[27000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.415174][T27000] syz.2.8961[27000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.427390][T27000] syz.2.8961[27000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.623025][T27009] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8962'. [ 386.908272][T27023] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8971'. [ 387.835176][T27052] netlink: 'syz.7.8983': attribute type 4 has an invalid length. [ 387.867654][T27055] loop7: detected capacity change from 0 to 128 [ 387.886258][T27056] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8984'. [ 387.900147][T27055] syz.7.8985[27055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.900250][T27055] syz.7.8985[27055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.911924][T27055] syz.7.8985[27055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.174411][T27061] loop2: detected capacity change from 0 to 512 [ 388.258290][T27061] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8987: bg 0: block 248: padding at end of block bitmap is not set [ 388.273632][T27061] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.8987: Failed to acquire dquot type 1 [ 388.288983][T27061] EXT4-fs (loop2): 1 truncate cleaned up [ 388.295212][T27061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.310757][T27061] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.349067][T25214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.510624][T27067] loop2: detected capacity change from 0 to 2048 [ 388.517358][T27067] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.523879][T27067] EXT4-fs: Ignoring removed i_version option [ 388.547957][T27067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.638022][T25214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.656153][T27085] loop2: detected capacity change from 0 to 164 [ 388.663804][T27085] ISOFS: unable to read i-node block [ 388.898258][T27101] lo speed is unknown, defaulting to 1000 [ 389.247164][T27114] loop7: detected capacity change from 0 to 512 [ 389.269866][T27114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 389.285072][T27114] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.568567][T27120] bridge0: port 3(syz_tun) entered blocking state [ 389.575147][T27120] bridge0: port 3(syz_tun) entered disabled state [ 389.583723][T27120] syz_tun: entered allmulticast mode [ 389.595216][T27120] syz_tun: entered promiscuous mode [ 389.601546][T27120] bridge0: port 3(syz_tun) entered blocking state [ 389.608157][T27120] bridge0: port 3(syz_tun) entered forwarding state [ 389.656706][T27120] syz_tun: left allmulticast mode [ 389.661824][T27120] syz_tun: left promiscuous mode [ 389.666996][T27120] bridge0: port 3(syz_tun) entered disabled state [ 389.715614][T27120] bridge_slave_0: left promiscuous mode [ 389.721467][T27120] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.739597][T27120] bridge_slave_1: left allmulticast mode [ 389.745344][T27120] bridge_slave_1: left promiscuous mode [ 389.751150][T27120] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.770296][T27120] bond0: (slave bond_slave_0): Releasing backup interface [ 389.782854][T27120] bond0: (slave bond_slave_1): Releasing backup interface [ 389.799382][T27120] team0: Port device team_slave_0 removed [ 389.812241][T27120] team0: Port device team_slave_1 removed [ 389.819579][T27120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.827099][T27120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.835518][T23374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 389.836772][T27120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.852051][T27120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.015047][T27145] infiniband syz1: set active [ 390.019789][T27145] infiniband syz1: added bond0 [ 390.057963][T27145] RDS/IB: syz1: added [ 390.062120][T27145] smc: adding ib device syz1 with port count 1 [ 390.068564][T27145] smc: ib device syz1 port 1 has pnetid [ 390.104983][T27173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9026'. [ 390.127686][T27177] loop3: detected capacity change from 0 to 128 [ 390.439902][T27194] loop8: detected capacity change from 0 to 512 [ 390.468496][T27194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.481293][T27194] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.502807][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.520902][T27209] loop8: detected capacity change from 0 to 128 [ 390.570063][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9044'. [ 390.742748][T27218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.783732][T27220] loop8: detected capacity change from 0 to 128 [ 390.786060][T27222] bridge0: port 1(syz_tun) entered blocking state [ 390.796668][T27222] bridge0: port 1(syz_tun) entered disabled state [ 390.803564][T27222] syz_tun: entered allmulticast mode [ 390.809448][T27220] syz.8.9047[27220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.809501][T27220] syz.8.9047[27220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.809661][T27222] syz_tun: entered promiscuous mode [ 390.823182][T27220] syz.8.9047[27220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.833418][T27222] bridge0: port 1(syz_tun) entered blocking state [ 390.855617][T27222] bridge0: port 1(syz_tun) entered forwarding state [ 390.868732][T27223] syz_tun: left allmulticast mode [ 390.873778][T27223] syz_tun: left promiscuous mode [ 390.878844][T27223] bridge0: port 1(syz_tun) entered disabled state [ 390.902884][T27225] loop9: detected capacity change from 0 to 128 [ 390.910647][T27225] EXT4-fs: test_dummy_encryption option not supported [ 391.049331][T27235] bridge_slave_0: left promiscuous mode [ 391.055075][T27235] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.063818][T27235] bridge_slave_1: left allmulticast mode [ 391.069667][T27235] bridge_slave_1: left promiscuous mode [ 391.075542][T27235] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.085553][T27235] bond0: (slave bond_slave_0): Releasing backup interface [ 391.093485][T27235] bond_slave_0: left allmulticast mode [ 391.099031][T27235] bond_slave_0: left promiscuous mode [ 391.106945][T27235] bond0: (slave bond_slave_1): Releasing backup interface [ 391.115426][T27235] bond_slave_1: left allmulticast mode [ 391.120896][T27235] bond_slave_1: left promiscuous mode [ 391.128015][T27235] team_slave_0: left allmulticast mode [ 391.133773][T27235] team_slave_0: left promiscuous mode [ 391.142343][T27235] team0: Port device team_slave_0 removed [ 391.148936][T27235] team_slave_1: left allmulticast mode [ 391.155198][T27235] team_slave_1: left promiscuous mode [ 391.162789][T27235] team0: Port device team_slave_1 removed [ 391.169959][T27235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.177519][T27235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.186379][T27235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.193789][T27235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.377925][T27256] infiniband syz1: set active [ 391.387843][T27256] bridge_slave_0: left allmulticast mode [ 391.393509][T27256] bridge_slave_0: left promiscuous mode [ 391.399262][T27256] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.408043][T27256] bridge_slave_1: left allmulticast mode [ 391.413734][T27256] bridge_slave_1: left promiscuous mode [ 391.419457][T27256] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.428992][T27256] bond0: (slave bond_slave_0): Releasing backup interface [ 391.439217][T27256] bond0: (slave bond_slave_1): Releasing backup interface [ 391.451621][T27256] team0: Port device team_slave_0 removed [ 391.461284][T27256] team0: Port device team_slave_1 removed [ 391.468872][T27256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.476495][T27256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.485134][T27256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.492559][T27256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.513094][T14178] infiniband syz1: set down [ 391.660781][T27271] loop8: detected capacity change from 0 to 128 [ 391.667731][T27271] EXT4-fs: test_dummy_encryption option not supported [ 392.007522][T27289] batadv0: entered promiscuous mode [ 392.028621][T27291] loop9: detected capacity change from 0 to 128 [ 392.056260][T27291] syz.9.9075[27291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.056384][T27291] syz.9.9075[27291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.068071][T27291] syz.9.9075[27291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.447534][T27342] loop7: detected capacity change from 0 to 256 [ 392.513696][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 392.513710][ T29] audit: type=1326 audit(1730282412.939:18087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.543776][ T29] audit: type=1326 audit(1730282412.939:18088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.567457][ T29] audit: type=1326 audit(1730282412.939:18089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.592761][ T29] audit: type=1326 audit(1730282412.939:18090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.616489][ T29] audit: type=1326 audit(1730282412.939:18091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.640142][ T29] audit: type=1326 audit(1730282412.939:18092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.663796][ T29] audit: type=1326 audit(1730282412.939:18093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.687520][ T29] audit: type=1326 audit(1730282412.939:18094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.711238][ T29] audit: type=1326 audit(1730282412.939:18095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.734900][ T29] audit: type=1326 audit(1730282412.939:18096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27341 comm="syz.7.9097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b4af4e719 code=0x7ffc0000 [ 392.830801][T27371] loop8: detected capacity change from 0 to 512 [ 392.856767][T27371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.869794][T27371] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.946311][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.012493][T27400] loop8: detected capacity change from 0 to 128 [ 393.036846][T27400] syz.8.9119[27400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.036913][T27400] syz.8.9119[27400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.048888][T27400] syz.8.9119[27400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.061374][T27393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9112'. [ 393.164195][T27417] rdma_rxe: rxe_newlink: failed to add bond0 [ 393.322370][T27423] loop9: detected capacity change from 0 to 512 [ 393.348690][T27423] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 393.361379][T27423] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.705869][T14178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.709437][T27435] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 393.731753][T27435] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 393.761675][T27440] loop2: detected capacity change from 0 to 512 [ 393.789900][T27440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.803215][T27440] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.818016][T14178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.857767][T27436] lo speed is unknown, defaulting to 1000 [ 393.909032][T25214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.929647][T14178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.990782][T27436] chnl_net:caif_netlink_parms(): no params data found [ 394.021100][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 394.032813][T14178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.045569][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9143'. [ 394.214955][T27436] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.222299][T27436] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.230064][T27436] bridge_slave_0: entered allmulticast mode [ 394.237462][T27436] bridge_slave_0: entered promiscuous mode [ 394.245368][T27478] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9146'. [ 394.255130][T27436] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.262238][T27436] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.270963][T27436] bridge_slave_1: entered allmulticast mode [ 394.279371][T27436] bridge_slave_1: entered promiscuous mode [ 394.394372][T14178] dvmrp0 (unregistering): left allmulticast mode [ 394.437938][T14178] bond0 (unregistering): left allmulticast mode [ 394.444376][T14178] bond0 (unregistering): left promiscuous mode [ 394.457088][T14178] bond0 (unregistering): Released all slaves [ 394.483279][T27436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.494423][T27436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.532966][T27436] team0: Port device team_slave_0 added [ 394.548474][T27436] team0: Port device team_slave_1 added [ 394.579658][T14178] hsr_slave_0: left promiscuous mode [ 394.586313][T14178] hsr_slave_1: left promiscuous mode [ 394.594477][T14178] bridge_slave_0: left allmulticast mode [ 394.600228][T14178] team0: left allmulticast mode [ 394.605112][T14178] team0: left promiscuous mode [ 394.610060][T14178] veth1_macvtap: left promiscuous mode [ 394.615674][T14178] veth0_macvtap: left promiscuous mode [ 394.621268][T14178] veth1_vlan: left promiscuous mode [ 394.626691][T14178] veth0_vlan: left promiscuous mode [ 394.678915][T14178] pimreg (unregistering): left allmulticast mode [ 394.757877][T27490] loop2: detected capacity change from 0 to 512 [ 394.765016][T27436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.772059][T27436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.798174][T27436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.811553][T27489] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9151'. [ 394.844345][T27492] bridge_slave_0: left allmulticast mode [ 394.850095][T27492] bridge_slave_0: left promiscuous mode [ 394.855817][T27492] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.867381][T27490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 394.880707][T27492] bridge_slave_1: left allmulticast mode [ 394.886461][T27492] bridge_slave_1: left promiscuous mode [ 394.892157][T27492] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.896686][T27490] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.913193][T27492] bond0: (slave bond_slave_0): Releasing backup interface [ 394.933607][T27492] bond_slave_0: left allmulticast mode [ 394.939224][T27492] bond_slave_0: left promiscuous mode [ 394.949114][T27492] bond0: (slave bond_slave_1): Releasing backup interface [ 394.960250][T27492] bond_slave_1: left allmulticast mode [ 394.965871][T27492] bond_slave_1: left promiscuous mode [ 394.980805][T27492] team0: Port device team_slave_0 removed [ 394.991224][T27492] team0: Port device team_slave_1 removed [ 394.998413][T27492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.006009][T27492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.017652][T27492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.025282][T27492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.057117][T27436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.064106][T27436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.090267][T27436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.190066][T27436] hsr_slave_0: entered promiscuous mode [ 395.213112][T27436] hsr_slave_1: entered promiscuous mode [ 395.239711][T27436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.264406][T27436] Cannot create hsr debugfs directory [ 395.537271][T14178] IPVS: stop unused estimator thread 0... [ 395.662060][T27531] loop7: detected capacity change from 0 to 512 [ 395.669320][T27531] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 395.680692][T27533] bridge0: port 3(syz_tun) entered blocking state [ 395.687485][T27533] bridge0: port 3(syz_tun) entered disabled state [ 395.697630][T27533] syz_tun: entered allmulticast mode [ 395.704075][T27533] syz_tun: entered promiscuous mode [ 395.709697][T27533] bridge0: port 3(syz_tun) entered blocking state [ 395.709883][T25214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 395.716217][T27533] bridge0: port 3(syz_tun) entered forwarding state [ 395.728363][T27531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.744953][T27531] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.757253][T27534] netlink: 'syz.8.9167': attribute type 4 has an invalid length. [ 395.815583][T27531] loop7: detected capacity change from 512 to 11 [ 395.835226][T27531] EXT4-fs error (device loop7): ext4_write_dquot:6859: comm syz.7.9169: Failed to commit dquot type 0 [ 395.857061][T27531] EXT4-fs (loop7): Remounting filesystem read-only [ 395.913282][T27552] loop8: detected capacity change from 0 to 128 [ 395.918557][T27436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 395.922030][T27552] EXT4-fs: test_dummy_encryption option not supported [ 395.941121][T27436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.960974][T27436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.978963][T27436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.987227][T27557] rdma_rxe: rxe_newlink: failed to add bond0 [ 396.028914][T23374] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.039969][T27535] kmmpd-loop7: attempt to access beyond end of device [ 396.039969][T27535] loop7: rw=14337, sector=34, nr_sectors = 2 limit=11 [ 396.054000][T27535] Buffer I/O error on dev loop7, logical block 17, lost sync page write [ 396.068226][T14167] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.133616][T27436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.148534][T14167] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.175198][T27436] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.206966][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.214137][T14212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.236551][T14167] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.255950][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.263119][T14212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.322566][T14167] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.357432][T27560] lo speed is unknown, defaulting to 1000 [ 396.384346][T27577] netlink: 'syz.9.9184': attribute type 4 has an invalid length. [ 396.473054][T14167] infiniband syz1: set down [ 396.516976][T14212] smc: removing ib device syz1 [ 396.517081][T14167] bond0 (unregistering): Released all slaves [ 396.530809][T14167] bond1 (unregistering): Released all slaves [ 396.539422][T14167] bond2 (unregistering): Released all slaves [ 396.546919][T27585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9187'. [ 396.561404][T27589] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9189'. [ 396.622469][T27594] loop9: detected capacity change from 0 to 136 [ 396.669658][T27436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.688646][T27594] can0: slcan on ttyS3. [ 396.795308][T27594] can0 (unregistered): slcan off ttyS3. [ 396.806537][T27594] Falling back ldisc for ttyS3. [ 396.860710][T27560] chnl_net:caif_netlink_parms(): no params data found [ 397.078085][T27560] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.085247][T27560] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.109297][T27560] bridge_slave_0: entered allmulticast mode [ 397.117403][T27560] bridge_slave_0: entered promiscuous mode [ 397.172267][T27560] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.179507][T27560] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.190274][T27560] bridge_slave_1: entered allmulticast mode [ 397.197018][T27560] bridge_slave_1: entered promiscuous mode [ 397.323202][T27625] random: crng reseeded on system resumption [ 397.479532][T27608] wireguard0: entered promiscuous mode [ 397.485081][T27608] wireguard0: entered allmulticast mode [ 397.504870][T27436] veth0_vlan: entered promiscuous mode [ 397.551467][T14167] hsr_slave_0: left promiscuous mode [ 397.578310][T14167] hsr_slave_1: left promiscuous mode [ 397.600617][T14167] veth1_macvtap: left promiscuous mode [ 397.606225][T14167] veth0_macvtap: left promiscuous mode [ 397.611719][T14167] veth1_vlan: left promiscuous mode [ 397.616966][T14167] veth0_vlan: left promiscuous mode [ 397.804511][T27560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.823187][T27436] veth1_vlan: entered promiscuous mode [ 397.833653][T27634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27634 comm=syz.8.9200 [ 397.853860][T27560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.882693][T27436] veth0_macvtap: entered promiscuous mode [ 397.916284][T27436] veth1_macvtap: entered promiscuous mode [ 397.923186][T27560] team0: Port device team_slave_0 added [ 397.939295][T27560] team0: Port device team_slave_1 added [ 398.007491][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.017956][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.027838][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.038356][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.048243][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.058681][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.068524][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.078992][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.093677][T27436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.121026][T27560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.128016][T27560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.153941][T27560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.166794][T27560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.173745][T27560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.199663][T27560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.211603][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.222070][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.231912][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.242368][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.252254][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.262695][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.272535][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.283049][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.292877][T27436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.303338][T27436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.314810][T27436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.370626][T27560] hsr_slave_0: entered promiscuous mode [ 398.378657][T27560] hsr_slave_1: entered promiscuous mode [ 398.385120][T27560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.392734][T27560] Cannot create hsr debugfs directory [ 398.401465][T27436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.411029][T27436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.419891][T27436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.428911][T27436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.489979][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 398.489991][ T29] audit: type=1400 audit(1730282418.919:18331): avc: denied { mounton } for pid=27436 comm="syz-executor" path="/root/syzkaller.Rvlpgm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=95954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 398.497971][T27651] loop9: detected capacity change from 0 to 256 [ 398.623165][ T29] audit: type=1326 audit(1730282419.049:18332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.688982][ T29] audit: type=1326 audit(1730282419.049:18333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.712779][ T29] audit: type=1326 audit(1730282419.049:18334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.736563][ T29] audit: type=1326 audit(1730282419.049:18335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.760269][ T29] audit: type=1326 audit(1730282419.049:18336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.784001][ T29] audit: type=1326 audit(1730282419.049:18337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.807734][ T29] audit: type=1326 audit(1730282419.049:18338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.831306][ T29] audit: type=1326 audit(1730282419.049:18339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.854957][ T29] audit: type=1326 audit(1730282419.049:18340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27650 comm="syz.9.9207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f848a1ae719 code=0x7ffc0000 [ 398.948444][T27666] loop3: detected capacity change from 0 to 128 [ 398.955739][T27666] EXT4-fs: test_dummy_encryption option not supported [ 398.978506][T27672] loop9: detected capacity change from 0 to 512 [ 398.988263][T27672] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 399.018433][T27672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.034928][T27674] batadv0: entered promiscuous mode [ 399.040762][T27672] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.083767][T27560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.092535][T27560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 399.104461][T27560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 399.116437][T27560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.189759][T27560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.190016][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.207264][T27560] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.223807][T14167] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.231043][T14167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.262888][T27560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.273688][T27560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.283212][T27693] loop9: detected capacity change from 0 to 136 [ 399.300061][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.307274][T14212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.340791][T27693] can0: slcan on ttyS3. [ 399.389036][T27693] can0 (unregistered): slcan off ttyS3. [ 399.394945][T27693] Falling back ldisc for ttyS3. [ 399.394951][T27560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.466808][T27703] netlink: 80 bytes leftover after parsing attributes in process `syz.9.9224'. [ 399.592181][T27714] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9226'. [ 399.639475][T27560] veth0_vlan: entered promiscuous mode [ 399.647809][T27560] veth1_vlan: entered promiscuous mode [ 399.663203][T27560] veth0_macvtap: entered promiscuous mode [ 399.671052][T27560] veth1_macvtap: entered promiscuous mode [ 399.681247][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.691715][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.701650][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.712168][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.722011][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.732511][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.742345][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.752799][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.762675][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.773183][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.787931][T27560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.802000][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.812565][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.822553][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.833069][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.843094][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.853595][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.863511][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.874051][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.883971][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.894434][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.904455][T27560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.914976][T27560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.926110][T27560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.934042][T27726] bridge0: port 3(syz_tun) entered blocking state [ 399.940647][T27726] bridge0: port 3(syz_tun) entered disabled state [ 399.947615][T27726] syz_tun: entered allmulticast mode [ 399.953815][T27726] syz_tun: entered promiscuous mode [ 399.959292][T27726] bridge0: port 3(syz_tun) entered blocking state [ 399.965823][T27726] bridge0: port 3(syz_tun) entered forwarding state [ 399.976942][T27560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.985695][T27560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.994422][T27560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.003226][T27560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.258633][T27759] batadv0: entered promiscuous mode [ 400.333673][T27765] loop3: detected capacity change from 0 to 512 [ 400.352972][T27765] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 400.367714][T27765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.389637][T27765] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.517293][T27771] wireguard0: entered promiscuous mode [ 400.522885][T27771] wireguard0: entered allmulticast mode [ 400.598058][T27436] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.713206][T27819] loop8: detected capacity change from 0 to 512 [ 400.761347][T27819] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 400.773907][T27819] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.955235][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 400.966722][T27831] wireguard1: entered promiscuous mode [ 400.972229][T27831] wireguard1: entered allmulticast mode [ 401.353850][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9285'. [ 401.603229][T27826] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 401.608548][T27871] program syz.9.9292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.696619][T27885] loop8: detected capacity change from 0 to 128 [ 401.703183][T27885] EXT4-fs: test_dummy_encryption option not supported [ 401.835908][T27890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27890 comm=syz.3.9300 [ 402.067234][T27895] infiniband syz1: set down [ 402.071820][T27895] infiniband syz1: added bond0 [ 402.084408][T27895] RDS/IB: syz1: added [ 402.088589][T27895] smc: adding ib device syz1 with port count 1 [ 402.094803][T27895] smc: ib device syz1 port 1 has pnetid [ 402.531844][T27905] loop9: detected capacity change from 0 to 512 [ 402.541796][T27905] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 402.578990][T27905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.593492][T27905] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.801310][T27927] bridge0: port 1(syz_tun) entered blocking state [ 402.807829][T27927] bridge0: port 1(syz_tun) entered disabled state [ 402.818914][T27927] syz_tun: entered allmulticast mode [ 402.828521][T27927] syz_tun: entered promiscuous mode [ 402.835868][T27927] bridge0: port 1(syz_tun) entered blocking state [ 402.842447][T27927] bridge0: port 1(syz_tun) entered forwarding state [ 402.864627][T27927] syz_tun: left allmulticast mode [ 402.869763][T27927] syz_tun: left promiscuous mode [ 402.874946][T27927] bridge0: port 1(syz_tun) entered disabled state [ 402.884593][T27927] infiniband syz1: set down [ 402.917166][T24101] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 402.940994][T27932] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9312'. [ 402.964424][T24101] EXT4-fs (loop9): Remounting filesystem read-only [ 402.971012][T24101] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 402.984225][T24101] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 403.028046][T24101] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 403.087434][T27938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 403.153646][T24101] bridge0: port 3(syz_tun) entered disabled state [ 403.167831][T24101] syz_tun (unregistering): left allmulticast mode [ 403.174320][T24101] syz_tun (unregistering): left promiscuous mode [ 403.180745][T24101] bridge0: port 3(syz_tun) entered disabled state [ 403.225658][T27956] loop3: detected capacity change from 0 to 136 [ 403.238217][T27956] can0: slcan on ttyS3. [ 403.314755][T27956] can0 (unregistered): slcan off ttyS3. [ 403.320398][T27956] Falling back ldisc for ttyS3. [ 403.394286][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.666832][T27968] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9335'. [ 403.706558][T14203] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.717059][T14203] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.755735][T27984] loop4: detected capacity change from 0 to 256 [ 403.756911][T27982] netlink: 104 bytes leftover after parsing attributes in process `syz.8.9341'. [ 403.781231][T14203] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.791682][T14203] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.887097][T27971] lo speed is unknown, defaulting to 1000 [ 403.890446][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 403.890459][ T29] audit: type=1326 audit(1730282424.289:18402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 403.922618][ T29] audit: type=1326 audit(1730282424.289:18403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 403.946289][ T29] audit: type=1326 audit(1730282424.289:18404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 403.947724][T27993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9342'. [ 403.969909][ T29] audit: type=1326 audit(1730282424.289:18405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 403.969937][ T29] audit: type=1326 audit(1730282424.289:18406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 403.969986][ T29] audit: type=1326 audit(1730282424.289:18407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 404.049844][ T29] audit: type=1326 audit(1730282424.289:18408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 404.062568][T27971] chnl_net:caif_netlink_parms(): no params data found [ 404.073453][ T29] audit: type=1326 audit(1730282424.289:18409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 404.103824][ T29] audit: type=1326 audit(1730282424.289:18410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 404.129777][ T29] audit: type=1326 audit(1730282424.289:18411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27983 comm="syz.4.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3f4d7e719 code=0x7ffc0000 [ 404.199835][T14203] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.210175][T14203] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.262415][T14203] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.272875][T14203] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.282536][T28020] program syz.3.9353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.351543][T28031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9357'. [ 404.392480][T27971] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.399650][T27971] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.402344][T28036] loop4: detected capacity change from 0 to 136 [ 404.407150][T27971] bridge_slave_0: entered allmulticast mode [ 404.419576][T27971] bridge_slave_0: entered promiscuous mode [ 404.429493][T27971] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.436633][T27971] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.451993][T27971] bridge_slave_1: entered allmulticast mode [ 404.460208][T27971] bridge_slave_1: entered promiscuous mode [ 404.470727][T28036] can0: slcan on ttyS3. [ 404.500198][T14203] bridge_slave_1: left allmulticast mode [ 404.505940][T14203] bridge_slave_1: left promiscuous mode [ 404.511640][T14203] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.521977][T28043] loop8: detected capacity change from 0 to 512 [ 404.528996][T14203] bridge_slave_0: left allmulticast mode [ 404.534637][T14203] bridge_slave_0: left promiscuous mode [ 404.534801][T28036] can0 (unregistered): slcan off ttyS3. [ 404.540367][T14203] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.546704][T28036] Falling back ldisc for ttyS3. [ 404.590871][T28043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 404.605572][T28043] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.727084][T14203] bond0 (unregistering): left allmulticast mode [ 404.733411][T14203] bond_slave_0: left allmulticast mode [ 404.738927][T14203] bond_slave_1: left allmulticast mode [ 404.744446][T14203] bond0 (unregistering): left promiscuous mode [ 404.750783][T14203] bond_slave_0: left promiscuous mode [ 404.756361][T14203] bond_slave_1: left promiscuous mode [ 404.766379][T14203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.777005][T14203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.787330][T14203] bond0 (unregistering): Released all slaves [ 404.802465][T28045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9362'. [ 404.811576][T28057] bridge0: port 3(syz_tun) entered blocking state [ 404.818043][T28057] bridge0: port 3(syz_tun) entered disabled state [ 404.826736][T28057] syz_tun: entered allmulticast mode [ 404.833487][T28057] syz_tun: entered promiscuous mode [ 404.839665][T28057] bridge0: port 3(syz_tun) entered blocking state [ 404.846168][T28057] bridge0: port 3(syz_tun) entered forwarding state [ 404.860951][T28058] syz_tun: left allmulticast mode [ 404.866089][T28058] syz_tun: left promiscuous mode [ 404.871135][T28058] bridge0: port 3(syz_tun) entered disabled state [ 404.889612][T28058] bridge_slave_0: left allmulticast mode [ 404.895381][T28058] bridge_slave_0: left promiscuous mode [ 404.901043][T28058] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.915436][T28058] bridge_slave_1: left allmulticast mode [ 404.921126][T28058] bridge_slave_1: left promiscuous mode [ 404.926915][T28058] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.936663][T28058] bond0: (slave bond_slave_0): Releasing backup interface [ 404.947220][T28058] bond0: (slave bond_slave_1): Releasing backup interface [ 404.959967][T28058] team0: Port device team_slave_0 removed [ 404.969225][T28058] team0: Port device team_slave_1 removed [ 404.976264][T28058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.983820][T28058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.992525][T28058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.000426][T28058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.029039][T27971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.041415][T27971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.161922][T27971] team0: Port device team_slave_0 added [ 405.168576][T27971] team0: Port device team_slave_1 added [ 405.178549][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 405.190055][T14203] hsr_slave_0: left promiscuous mode [ 405.196381][T14203] hsr_slave_1: left promiscuous mode [ 405.202184][T14203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.209812][T14203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.219846][T14203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.227662][T14203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.270102][T28071] loop8: detected capacity change from 0 to 136 [ 405.279400][T28072] random: crng reseeded on system resumption [ 405.415173][T14203] veth1_macvtap: left promiscuous mode [ 405.420703][T14203] veth0_macvtap: left promiscuous mode [ 405.426196][T14203] veth1_vlan: left promiscuous mode [ 405.431411][T14203] veth0_vlan: left promiscuous mode [ 405.485954][T28080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9375'. [ 405.592199][T14203] team0 (unregistering): Port device team_slave_1 removed [ 405.603083][T14203] team0 (unregistering): Port device team_slave_0 removed [ 405.645531][T28071] can0: slcan on ttyS3. [ 405.647578][T27971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.656731][T27971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.682678][T27971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.703904][T27971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.710961][T27971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.737095][T27971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.765432][T28083] can0 (unregistered): slcan off ttyS3. [ 405.771189][T28083] Falling back ldisc for ttyS3. [ 405.788913][T27971] hsr_slave_0: entered promiscuous mode [ 405.798649][T27971] hsr_slave_1: entered promiscuous mode [ 405.810121][T27971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.819859][T27971] Cannot create hsr debugfs directory [ 405.881009][T28098] netlink: 'syz.8.9382': attribute type 10 has an invalid length. [ 405.897850][T28098] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 405.905734][T28098] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 405.914248][T28098] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 406.099372][T28109] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9387'. [ 406.132559][T28112] loop2: detected capacity change from 0 to 136 [ 406.196590][T28112] can0: slcan on ttyS3. [ 406.199315][T28119] netlink: 'syz.8.9392': attribute type 10 has an invalid length. [ 406.297038][T28112] can0 (unregistered): slcan off ttyS3. [ 406.303945][T28112] Falling back ldisc for ttyS3. [ 406.333871][T28127] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9395'. [ 406.459148][T27971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.469817][T28140] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9400'. [ 406.471040][T27971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.498233][T28142] netlink: 'syz.8.9401': attribute type 10 has an invalid length. [ 406.506283][T27971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.522794][T27971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.581158][T27971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.608268][T27971] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.628036][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.635260][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.650914][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.658120][T14178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.741706][T28152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28152 comm=syz.8.9404 [ 406.742638][T28149] loop2: detected capacity change from 0 to 512 [ 406.814726][T27971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.830943][T28149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 406.847427][T28160] loop8: detected capacity change from 0 to 136 [ 406.856700][T28149] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.890344][T28160] can0: slcan on ttyS3. [ 406.945641][T28160] can0 (unregistered): slcan off ttyS3. [ 406.960420][T28160] Falling back ldisc for ttyS3. [ 406.986698][T27971] veth0_vlan: entered promiscuous mode [ 406.997863][T27971] veth1_vlan: entered promiscuous mode [ 407.012726][T27971] veth0_macvtap: entered promiscuous mode [ 407.029691][T27971] veth1_macvtap: entered promiscuous mode [ 407.045906][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.056515][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.066445][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.076920][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.086836][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.097266][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.107096][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.117592][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.168916][T28176] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9409'. [ 407.179065][T27971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.230140][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.240689][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.250553][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.261016][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.271004][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.281490][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.291428][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.301878][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.311863][T27971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.322351][T27971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.340942][T28179] loop8: detected capacity change from 0 to 512 [ 407.425107][T28179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 407.437810][T28179] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.489363][T27971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.504967][T27971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.513754][T27971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.522516][T27971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.531815][T27971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.616035][T25214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 407.630209][T28186] loop0: detected capacity change from 0 to 512 [ 407.637423][T28186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 407.662663][T28186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.675570][T28186] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 407.792987][T28208] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9419'. [ 407.802466][T28210] syz_tun: left allmulticast mode [ 407.807683][T28210] syz_tun: left promiscuous mode [ 407.813082][T28210] bridge0: port 3(syz_tun) entered disabled state [ 407.832117][T28210] bridge_slave_0: left allmulticast mode [ 407.837952][T28210] bridge_slave_0: left promiscuous mode [ 407.843574][T28210] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.864483][T27971] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.879919][T28210] bridge_slave_1: left allmulticast mode [ 407.885683][T28210] bridge_slave_1: left promiscuous mode [ 407.891403][T28210] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.906708][T22554] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 407.920024][T28217] loop0: detected capacity change from 0 to 128 [ 407.926845][T28210] bond0: (slave bond_slave_0): Releasing backup interface [ 407.928818][T28217] EXT4-fs: test_dummy_encryption option not supported [ 407.937198][T28219] program syz.8.9424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.960955][T28210] bond0: (slave bond_slave_1): Releasing backup interface [ 407.982674][T28210] team0: Port device team_slave_0 removed [ 407.992691][T28210] team0: Port device team_slave_1 removed [ 408.000964][T28210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.008472][T28210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.020141][T28210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.027664][T28210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.106588][T28229] loop4: detected capacity change from 0 to 256 [ 408.532529][T28238] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9431'. [ 408.599973][T28244] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28244 comm=syz.2.9434 [ 408.660441][T28248] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9436'. [ 408.733880][T28254] infiniband syz1: set down [ 408.847185][T28258] syz1: rxe_newlink: already configured on bond0 [ 408.869870][T28260] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9442'. [ 408.968615][T28277] loop4: detected capacity change from 0 to 128 [ 408.975922][T28277] EXT4-fs: test_dummy_encryption option not supported [ 409.077921][T28279] bond0: (slave netdevsim1): Releasing backup interface [ 409.092170][T28279] netdevsim netdevsim8 netdevsim1: left allmulticast mode [ 409.164247][ T29] kauditd_printk_skb: 2330 callbacks suppressed [ 409.164263][ T29] audit: type=1400 audit(1730282429.579:20742): avc: denied { ioctl } for pid=28290 comm="syz.3.9456" path="socket:[99027]" dev="sockfs" ino=99027 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.277467][T28300] loop0: detected capacity change from 0 to 512 [ 409.308344][T28300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 409.326754][T28300] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.827958][T28313] netlink: 'syz.4.9464': attribute type 10 has an invalid length. [ 409.843174][T28313] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 409.857526][T27971] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 409.928738][T28324] rdma_rxe: rxe_newlink: failed to add bond0 [ 409.936186][T28316] bond0: (slave netdevsim1): Releasing backup interface [ 409.989832][T28334] loop3: detected capacity change from 0 to 128 [ 409.998672][T28337] __nla_validate_parse: 1 callbacks suppressed [ 409.998688][T28337] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9476'. [ 410.014568][T28334] EXT4-fs: test_dummy_encryption option not supported [ 410.176231][T28347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9477'. [ 410.196868][T28350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9480'. [ 410.301565][T28354] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.9481'. [ 410.310825][T28354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9481'. [ 410.913119][T28370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9488'. [ 410.913137][T28371] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9489'. [ 410.913249][T28370] ================================================================== [ 410.913282][T28370] BUG: KCSAN: data-race in data_push_tail / string [ 410.913318][T28370] [ 410.913325][T28370] write to 0xffffffff88b955bb of 1 bytes by task 28371 on cpu 0: [ 410.913344][T28370] string+0x16c/0x210 [ 410.913374][T28370] vsnprintf+0xa09/0xe30 [ 410.913403][T28370] vscnprintf+0x42/0x90 [ 410.913432][T28370] printk_sprint+0x30/0x2d0 [ 410.913460][T28370] vprintk_store+0x570/0x810 [ 410.913488][T28370] vprintk_emit+0x15e/0x680 [ 410.913513][T28370] vprintk_default+0x26/0x30 [ 410.913537][T28370] vprintk+0x75/0x80 [ 410.913553][T28370] _printk+0x7a/0xa0 [ 410.913578][T28370] __nla_validate_parse+0x1881/0x1e30 [ 410.913601][T28370] __nla_parse+0x40/0x60 [ 410.913628][T28370] xfrm_user_rcv_msg+0x396/0x5c0 [ 410.913652][T28370] netlink_rcv_skb+0x12c/0x230 [ 410.913685][T28370] xfrm_netlink_rcv+0x47/0x60 [ 410.913712][T28370] netlink_unicast+0x599/0x670 [ 410.913737][T28370] netlink_sendmsg+0x5cc/0x6e0 [ 410.913754][T28370] __sock_sendmsg+0x140/0x180 [ 410.913777][T28370] ____sys_sendmsg+0x312/0x410 [ 410.913810][T28370] __sys_sendmsg+0x1d9/0x270 [ 410.913843][T28370] __x64_sys_sendmsg+0x46/0x50 [ 410.913869][T28370] x64_sys_call+0x2689/0x2d60 [ 410.913895][T28370] do_syscall_64+0xc9/0x1c0 [ 410.913917][T28370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.913946][T28370] [ 410.913953][T28370] read to 0xffffffff88b955b8 of 8 bytes by task 28370 on cpu 1: [ 410.913972][T28370] data_push_tail+0x102/0x430 [ 410.913997][T28370] data_alloc+0xbe/0x2c0 [ 410.914021][T28370] prb_reserve+0x85e/0xb60 [ 410.914046][T28370] vprintk_store+0x53f/0x810 [ 410.914070][T28370] vprintk_emit+0x15e/0x680 [ 410.914102][T28370] vprintk_default+0x26/0x30 [ 410.914132][T28370] vprintk+0x75/0x80 [ 410.914152][T28370] _printk+0x7a/0xa0 [ 410.914175][T28370] __nla_validate_parse+0x1881/0x1e30 [ 410.914195][T28370] __nla_parse+0x40/0x60 [ 410.914211][T28370] xfrm_user_rcv_msg+0x396/0x5c0 [ 410.914235][T28370] netlink_rcv_skb+0x12c/0x230 [ 410.914267][T28370] xfrm_netlink_rcv+0x47/0x60 [ 410.914295][T28370] netlink_unicast+0x599/0x670 [ 410.914321][T28370] netlink_sendmsg+0x5cc/0x6e0 [ 410.914338][T28370] __sock_sendmsg+0x140/0x180 [ 410.914359][T28370] ____sys_sendmsg+0x312/0x410 [ 410.914389][T28370] __sys_sendmsg+0x1d9/0x270 [ 410.914422][T28370] __x64_sys_sendmsg+0x46/0x50 [ 410.914449][T28370] x64_sys_call+0x2689/0x2d60 [ 410.914471][T28370] do_syscall_64+0xc9/0x1c0 [ 410.914491][T28370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.914519][T28370] [ 410.914525][T28370] value changed: 0x00000000fffffa12 -> 0x392e332e7a797360 [ 410.914539][T28370] [ 410.914545][T28370] Reported by Kernel Concurrency Sanitizer on: [ 410.914558][T28370] CPU: 1 UID: 0 PID: 28370 Comm: syz.4.9488 Tainted: G W 6.12.0-rc5-syzkaller-00044-gc1e939a21eb1 #0 [ 410.914586][T28370] Tainted: [W]=WARN [ 410.914594][T28370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.914609][T28370] ================================================================== [ 410.957374][T28377] loop3: detected capacity change from 0 to 128 [ 411.236194][T28377] EXT4-fs: test_dummy_encryption option not supported