last executing test programs: 4.504009682s ago: executing program 0 (id=1750): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) perf_event_open(&(0x7f00000009c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000700)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="60fafa8984d6910db2c75c9c4d738fceb48e521cd522282fd9ca99981b30a1120f62d6b5392b28d0933003b1c3fe79bfb58f8b03c3e6766b30198c21752e837bca1f44967a2a31c0693639a072e6fb5d0a793ff4fec56a5e153c856d054466ccf704143a491b2ac9170528128ec891996f41d25cf511a43bd27cdd53b8ad002872317143b5d8e32991df0b6a037fc4869fc600f9e76dd1a4574286acc37a0a", 0x9f}, {0x0}], 0x2, &(0x7f0000002ec0)=ANY=[], 0x18}}], 0x2, 0x8040) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000480)="86800ffa48649fd6afa32097f4da290c258791b4fae4232b9bfd3e8173956a9e3fa3227ff34906adf9b71c4f10ed09743d2415489217b6496020f1ea0b44592cdf3cce32693e532f23bbb328a35d0c4d588697b0bdd37ce9109383349db1f64b549e18633eeb47d62cf31a34af9ed8f4", 0x70}, {&(0x7f0000000500)="6f4d4da9e9d6c7e69468ccd4fc5c21dea59343c6d39b4d68cfdf8743ed48ef8984a49f20644fe846c7b78697d64b91cc69a26316c6e8ddae18b350a8d60a6c4c9a960f5d80d0", 0x46}, {&(0x7f0000000580)="652a429ef724784ac3182efa6b45fb808aff9bf94c96d169c9899a50a403cb0bcfab1c9e7fdd75e3168e222a451b4da863f0d0876caacd03c307c1028fe1e753dd65ea2b8046f2a6157083b72955cca86e79673f1bd28ff0985dd2481439", 0x5e}, {&(0x7f0000000380)="a770beadd8dcfd5c18eb70f9eee1e190bc4c7bd52f7b2d8ffc0877ba6df56f", 0x1f}, {&(0x7f0000000800)="d91cfa76955e365c2104db8bbf7003d5c19de719d7de3ca1b02bb794fe4726ef4a5f027ef67e1060d243d836c5c058bb199ebefc7ac35cc461171f33a33a2529e0ddfbb4515ddc30af8831a247c4f7085887edbc1042bcd0629845128d3430379ecffee00201ca1c3c60ecd2fdc03507f7cd7726155d606cb8dd6c6ec4146b1d6cc518eff951545d76a98f3f3bf22fa275b1dca8987d46db6318d36952a0d5e97cf0ad32fc6e8ccec3268f56896cea73a33c912029b6ef2517dc25708bdf6971786bbe5075", 0xc5}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="78000000000000002900000039000000080c01ff00000000fc020000000000000000000000000001fc00000000000000000000000000000010000000000000000000000000000002ff020000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000201400000000000000290000000b00000000000007000000001400000000000000290000003e0000000200000000000000"], 0xa8}}], 0x1, 0x4008040) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.690177539s ago: executing program 0 (id=1760): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000, 0x300}) 3.614294775s ago: executing program 0 (id=1761): sendto$inet6(0xffffffffffffffff, &(0x7f00000010c0)="a7", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe72) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x33, 0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xd, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x10, 0xffffdffc}, 0x48) setresuid(0x0, 0x0, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) mq_timedreceive(r4, &(0x7f00000001c0)=""/27, 0x1b, 0x40, &(0x7f0000000240)={0x0, 0x3938700}) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x1900}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x10}, &(0x7f00000002c0)=0xc) 3.613428055s ago: executing program 0 (id=1763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2.739295306s ago: executing program 0 (id=1773): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) remap_file_pages(&(0x7f000098d000/0x2000)=nil, 0x2000, 0x3000008, 0x3ff, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fchdir(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x0, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b5090100f9ffffff26000000f9ffffff180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x7, 0x4, 0x5, 0x8}]}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000300)=""/193, 0xc1, 0x100001, 0x2}) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000400)=@isdn={0x22, 0x2, 0x0, 0x7, 0x7}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="e15fec48e38a35f153b95061ee8795fc4a08d76a6da997b50912f17e2fa9cee40c8db30afa1bb4e5", 0x28}, {&(0x7f0000000200)="b034fb69cc73ec77e02dd378694205e38756fdf58f2903f1410ace4a833ccc1f829d23426048d59c8c3ddd81f43fe3bd53f7a9a20b0b1da3e1", 0x39}, {&(0x7f0000000480)="3a8953ce11cb8d135964c49dcc63f4627ab14cc417a7f08f0021fb6c86b584df020d7c0caf4471d0c35c032cc109cef85247e58e998f6da6e8b61b6d4cac7fab4e675c0fa3d973c07928512e05a75ff06d68bbb289a009484aeb880ef62d46", 0x5f}], 0x3}, 0x1) memfd_create(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xad, &(0x7f0000000000), &(0x7f0000000240)=0x4) 1.976076318s ago: executing program 4 (id=1786): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe72) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x33, 0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xd, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x10, 0xffffdffc}, 0x48) setresuid(0x0, 0x0, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mq_timedreceive(r5, &(0x7f00000001c0)=""/27, 0x1b, 0x40, &(0x7f0000000240)={0x0, 0x3938700}) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x1900}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x10}, &(0x7f00000002c0)=0xc) 1.968255239s ago: executing program 4 (id=1787): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18090000000000000000000000000000850000008800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x7, &(0x7f0000000300)=""/192, 0x0, 0x10}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1c}, {0x6}]}, 0x10) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x40000c1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x81, 0x8207, 0x64, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x7800, 0x3c40, 0xa6d, 0xfffffff7}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018180000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="000000eb51b60c9138a7ec3823006de400000000b7000000000000008500001a0ce6ff00ce00000000000000958000000000a1726bdb0000000000000000000000000200227def3d6d5f03fa"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x50, &(0x7f0000000400)=""/80, 0x40f00, 0x0, '\x00', r5, 0x25, r3, 0x8, &(0x7f0000000540)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x8000, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r3, r4, r4], &(0x7f0000000600)=[{0x2, 0x2, 0x9, 0x2}, {0x3, 0x4, 0x1, 0x5}, {0x3, 0x2, 0x6, 0xb}, {0x1, 0x1, 0x9, 0xc}], 0x10, 0x9d}, 0x90) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendto$packet(r6, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x14}, {0x2d}, {0x6}]}) socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$packet(r3, &(0x7f0000000040), &(0x7f0000000180)=0x14) ioctl$KDADDIO(r4, 0x4b34, 0xfffffffffffffff7) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x2004) 1.563328782s ago: executing program 3 (id=1794): socket(0x400000000010, 0x0, 0x0) r0 = io_uring_setup(0x4822, &(0x7f00000004c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x48, 0x10, 0x7, 0xfd1, 0x0, 0x3e, 0x7, 0x2c, 0x38, 0x391, 0x9, 0x9ee, 0x20, 0x2, 0xf779, 0x7fff, 0x40}, [{0x6474e551, 0x3cee, 0x0, 0x0, 0x75, 0xffffffde, 0xa9b9, 0x5}, {0x60000000, 0x4d, 0x3ff, 0x9, 0x7f, 0x801, 0x7, 0xbb6bf1f}], "a0675dae0e04be006a7b176c66e0c88bb96b1cca0437aad662203d4a89dc5789f4d5da7032b5b5495861dc75523fada06818a802eb07ac6fec49c896ccaf1461b6a4357368be4f3ccaacb37b469303034c61b58f6b303d947ce93c5a2a907c396cfa535f2cc8217762b5a6d57b521ff3eb29b4152ba8c8e2f61dbae2e7ebbe44dde94b1487f0394af9ca7d0f36cdd151a836d88491202351ad", ['\x00', '\x00']}, 0x311) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004050}, 0x1) recvmsg$inet_nvme(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12002) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 1.559723662s ago: executing program 3 (id=1795): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x52}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x4, 0x0, 'queue1\x00', 0x5}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000040)) 1.404592595s ago: executing program 3 (id=1796): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) perf_event_open(&(0x7f00000009c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000700)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="60fafa8984d6910db2c75c9c4d738fceb48e521cd522282fd9ca99981b30a1120f62d6b5392b28d0933003b1c3fe79bfb58f8b03c3e6766b30198c21752e837bca1f44967a2a31c0693639a072e6fb5d0a793ff4fec56a5e153c856d054466ccf704143a491b2ac9170528128ec891996f41d25cf511a43bd27cdd53b8ad002872317143b5d8e32991df0b6a037fc4869fc600f9e76dd1a4574286acc37a0a", 0x9f}, {0x0}], 0x2, &(0x7f0000002ec0)=ANY=[], 0x18}}], 0x2, 0x8040) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000480)="86800ffa48649fd6afa32097f4da290c258791b4fae4232b9bfd3e8173956a9e3fa3227ff34906adf9b71c4f10ed09743d2415489217b6496020f1ea0b44592cdf3cce32693e532f23bbb328a35d0c4d588697b0bdd37ce9109383349db1f64b549e18633eeb47d62cf31a34af9ed8f4", 0x70}, {&(0x7f0000000500)="6f4d4da9e9d6c7e69468ccd4fc5c21dea59343c6d39b4d68cfdf8743ed48ef8984a49f20644fe846c7b78697d64b91cc69a26316c6e8ddae18b350a8d60a6c4c9a960f5d80d0", 0x46}, {&(0x7f0000000580)="652a429ef724784ac3182efa6b45fb808aff9bf94c96d169c9899a50a403cb0bcfab1c9e7fdd75e3168e222a451b4da863f0d0876caacd03c307c1028fe1e753dd65ea2b8046f2a6157083b72955cca86e79673f1bd28ff0985dd2481439", 0x5e}, {&(0x7f0000000380)="a770beadd8dcfd5c18eb70f9eee1e190bc4c7bd52f7b2d8ffc0877ba6df56f", 0x1f}, {&(0x7f0000000800)="d91cfa76955e365c2104db8bbf7003d5c19de719d7de3ca1b02bb794fe4726ef4a5f027ef67e1060d243d836c5c058bb199ebefc7ac35cc461171f33a33a2529e0ddfbb4515ddc30af8831a247c4f7085887edbc1042bcd0629845128d3430379ecffee00201ca1c3c60ecd2fdc03507f7cd7726155d606cb8dd6c6ec4146b1d6cc518eff951545d76a98f3f3bf22fa275b1dca8987d46db6318d36952a0d5e97cf0ad32fc6e8ccec3268f56896cea73a33c912029b6ef2517dc25708bdf6971786bbe5075", 0xc5}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="78000000000000002900000039000000080c01ff00000000fc020000000000000000000000000001fc00000000000000000000000000000010000000000000000000000000000002ff020000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000201400000000000000290000000b00000000000007000000001400000000000000290000003e0000000200000000000000"], 0xa8}}], 0x1, 0x4008040) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.228097859s ago: executing program 2 (id=1801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=ANY=[@ANYBLOB="84010000100033060000000000000000ac1414bb000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014"], 0x184}}, 0x0) 1.227907369s ago: executing program 2 (id=1802): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1200008, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40086610, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x41009432, &(0x7f0000000180)={@id={0x40000, 0x0, @a}}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r10, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 1.107718909s ago: executing program 4 (id=1803): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff0100008500000008000000250000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xff00}, 0x80) 988.077739ms ago: executing program 4 (id=1805): socket(0x400000000010, 0x0, 0x0) r0 = io_uring_setup(0x4822, &(0x7f00000004c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x48, 0x10, 0x7, 0xfd1, 0x0, 0x3e, 0x7, 0x2c, 0x38, 0x391, 0x9, 0x9ee, 0x20, 0x2, 0xf779, 0x7fff, 0x40}, [{0x6474e551, 0x3cee, 0x0, 0x0, 0x75, 0xffffffde, 0xa9b9, 0x5}, {0x60000000, 0x4d, 0x3ff, 0x9, 0x7f, 0x801, 0x7, 0xbb6bf1f}], "a0675dae0e04be006a7b176c66e0c88bb96b1cca0437aad662203d4a89dc5789f4d5da7032b5b5495861dc75523fada06818a802eb07ac6fec49c896ccaf1461b6a4357368be4f3ccaacb37b469303034c61b58f6b303d947ce93c5a2a907c396cfa535f2cc8217762b5a6d57b521ff3eb29b4152ba8c8e2f61dbae2e7ebbe44dde94b1487f0394af9ca7d0f36cdd151a836d88491202351ad", ['\x00', '\x00']}, 0x311) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004050}, 0x1) recvmsg$inet_nvme(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12002) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 954.284822ms ago: executing program 4 (id=1807): creat(&(0x7f0000000000)='./file0\x00', 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x10, 0xa, 0x0) recvmsg$kcm(r8, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2400, 0x80ffff) connect$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000040042"], 0x68}}, 0x0) 905.935925ms ago: executing program 1 (id=1808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf, 0x0, "cd2cf7680800000100f200a0fc380e43c96d22"}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x413d, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r8, 0x8, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10050) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001c40)={0xbb0, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x9}}}}, [@NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5e28, 0x200, 0x1000, 0x1, 0x9, 0x1, 0x2, 0x3]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0xa}, {0x1}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0x3}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x1}, {0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x2, 0x3}, {0x7, 0x4}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x4}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x5, 0xa}, {0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x6, 0x6}, {0x6}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x7}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0xa}, {0x6, 0x6}, {0x4, 0x4}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x4}, {0x1, 0x1}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x7}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x8}, {0x4, 0x1}, {0x0, 0x3}, {0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x6, 0xa}, {0x3, 0xa}, {0x6, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x4}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x9}, {0x1, 0x6}, {0x5}, {0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x17f, 0xd13, 0x7, 0x0, 0x8, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x498c, 0x6, 0x520b, 0x4, 0x1, 0x6, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x2}, {0x4, 0x9}, {0x1, 0x4}, {0x3, 0x9}, {0x2, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8a, 0x4, 0x10, 0x1ff, 0x9, 0xdd, 0xa090]}}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x1552, 0xc, 0x4d37, 0x80, 0x10, 0x2]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x8}, {0x2, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x4, 0x4}, {0x3, 0x6}, {0x7, 0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x5, 0x7}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc0, 0x3, 0xb, 0xfffc, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4a1a, 0x7, 0x1, 0x8, 0x5, 0x1ff, 0x8b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x0, 0x400, 0x9, 0xee, 0x87e, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x5, 0x401, 0x81, 0x7295, 0x2, 0xfffc]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x4, 0x9}, {0x0, 0x9}, {0x3, 0xa}, {0x3}, {0x1, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x6, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x3, 0x2}, {}, {0x6}, {0x3, 0x8}, {0x3, 0x1}, {0x6, 0x3}, {0x6, 0x6}, {0x3, 0x3}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0x8}, {0x4, 0x5}, {0x2, 0x4}, {0x3, 0x1}, {0x7, 0x1}, {0x6, 0x6}, {0x2, 0x5}, {0x4, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x8}, {0x7, 0x7}, {}, {0x1, 0xa}, {0x7, 0x5}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0x4}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x36, 0x36, 0x1b, 0x24, 0x6c, 0xec0df0fc862c670e, 0x1b, 0x24, 0x1b, 0xb, 0x36, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x31c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x6, 0x9, 0x30, 0x18, 0x3, 0x36, 0x60, 0x24, 0x1b, 0xc, 0x4, 0x24, 0x12, 0x16, 0x3, 0x6, 0x60, 0x5, 0x4, 0x6c, 0x6c, 0x60, 0x48, 0x5, 0x1b, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xfffd, 0x5, 0xfff9, 0x1, 0x1, 0xb0]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x6, 0x4, 0xbb04, 0xfff, 0x10, 0x7, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0xc, 0xc, 0x6c, 0x1b, 0xb, 0x8, 0x4, 0x5, 0x5, 0x5, 0x16, 0x41, 0x9, 0x4, 0x60, 0x1, 0x48, 0xc, 0xc, 0x9, 0x60, 0x48, 0x3, 0x48, 0xb, 0x6, 0x3, 0x16, 0x9, 0x1b]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x24, 0x60, 0x3, 0x3c, 0x3, 0x16, 0x30, 0x1d, 0x9, 0x16, 0x1, 0x12, 0x3b, 0x18, 0x1b, 0x1d, 0x60, 0x1, 0x12, 0xb, 0x60, 0x9, 0x18, 0x5, 0x18, 0x48, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1907, 0x401, 0x0, 0x9, 0xce, 0x1000, 0xff09]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff7, 0x7, 0x9, 0x9, 0x10, 0x2, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x0, 0x3, 0x60, 0x24, 0x4, 0x16, 0x60, 0x9, 0x42, 0x2, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x1}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x7, 0x2}, {0x6, 0x4}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0x6}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x4b52, 0x8000, 0x5, 0x4, 0xfffa, 0x7]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x4}, {0x6, 0x5}, {0x6, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x7}, {}, {0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x6}, {0x1, 0x6}, {0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x1}, {}, {0x3, 0x5}, {0x6, 0x1}, {0x6, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x1}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x3}, {0x2}, {0x5, 0x4}, {0x7, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb6, 0x5, 0x8, 0xe, 0x4, 0x2, 0xc, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x16, 0x2, 0x60, 0x6c, 0x60, 0x30, 0x6c, 0x24, 0xb, 0x5, 0x68, 0xc, 0x5, 0x1b, 0x5a, 0x18, 0x4, 0x60, 0x3, 0x2, 0x12, 0x0, 0x5, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xb4b24c07ebe8706}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x0, 0x9, 0x0, 0x8000, 0x5, 0x400]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x1}, {0x1, 0x5}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x35, 0x1b, 0x67, 0x1, 0x4, 0x6c, 0x9, 0x12, 0x2, 0x24, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x7, 0x9}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0x4}, {0x5}, {0x7, 0x4}, {0x7, 0x8}, {0x3, 0x1}, {0x6, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x4}, {0x3, 0x4}, {0x6, 0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6de, 0x6, 0x8001, 0x8466, 0x9, 0xe7fe, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x4}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6, 0x3}, {0x3, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x3}, {0x3, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x6, 0x1}, {0x6, 0x7}, {0x7, 0x9}, {0x7, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x5, 0x6}, {0x6, 0x5}, {0x7, 0x1}, {0x4, 0x4}, {0x3, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x2}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x2, 0xa}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x7, 0x8}, {0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x475, 0x6dc, 0x1, 0x5, 0xd, 0x8, 0x1, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x1000, 0x2, 0x80, 0x1, 0x200, 0xef1]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe906, 0xa555, 0x3, 0x3, 0xed37, 0x10, 0x9, 0xfff8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x2}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0xa}, {0x5, 0x8}, {0x7, 0x9}, {0x2, 0x6}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x6}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x3, 0x5}, {}, {0x5, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x9}, {0x5, 0x8}, {0x5, 0x8}, {0x7, 0x9}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x2, 0xa}, {0x6}, {0x0, 0x6}, {0x4, 0x7}, {0x6, 0xa}, {0x2, 0x8}, {0x3, 0x6}, {0x2}, {0x1, 0x8}, {0x3, 0x8}, {0x5, 0x3}, {0x7}, {0x4, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x7, 0xa}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x0, 0x8}, {0x4, 0x7}, {0x3, 0x1}, {0x6, 0x6}, {0x3, 0x9}, {0x5, 0x6}, {0x6, 0x9}, {0x7, 0x8}, {0x7, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x3}, {0x5, 0x3}, {0x1, 0x8}, {}, {0x7, 0x1}, {0x6}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x6}, {0x6, 0x1}, {0x4, 0xa}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x9, 0x6c, 0x16, 0x3, 0x1b, 0x30, 0x36, 0x16, 0x30, 0x1b, 0x6c, 0x14, 0x48, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x4, 0x16, 0x19, 0x12, 0x6c, 0x6c, 0x5, 0xc, 0x24, 0x5, 0x24, 0x0, 0x48, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0xa633, 0x1, 0xe, 0x9, 0x6, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x4, 0xa, 0x81, 0x40, 0xc, 0x48bd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x800, 0x3ff, 0x0, 0xc497, 0x7fff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x801b100ffa0e334f, 0x48, 0xb, 0x1, 0x60, 0x1b, 0x48, 0x24, 0xc, 0x5, 0x48, 0x18, 0x30, 0x1b, 0x48]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2f, 0x1, 0xcc1, 0x8, 0x1, 0x1000, 0x24]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x3, 0x1, 0x7, 0x7fff, 0x2c, 0x3e]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0xa}, {0x2, 0xa}, {0x6}, {0x1, 0x2}, {0x2, 0x3}, {0x6, 0x6}, {0x2}, {0x4, 0x7}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x4, 0x9}, {0x4, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0xa}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0x1}, {0x5, 0x9}, {0x7, 0x5}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x5}, {0x1, 0xa}, {0x5, 0x4}, {0x2, 0x8}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x1, 0x68ac, 0x9, 0x717f, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x5, 0x5, 0x2d, 0x2, 0x3, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x3, 0x7, 0x7, 0x3, 0xef0, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x4, 0x7ff, 0xfffd, 0x4, 0x800, 0x380, 0x81]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x9}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x4, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x3, 0x7}, {0x4, 0x5}, {0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x8}, {0x5, 0x5}, {0x1}, {0x7, 0x1}, {0x5, 0xa}, {0x5, 0x6}, {0x6}, {0x0, 0x4}, {0x3}, {0x7, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x6, 0x5}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x6, 0x6}, {0x2}, {0x6, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd2, 0xfff9, 0x5, 0xb991, 0xa10, 0x2, 0xa, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x53, 0x7, 0x5, 0x0, 0x9, 0x49c0, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x7}, {0x7, 0x1}, {0x6, 0x1}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x3, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x6}, {0x2, 0x18}, {0x1, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {0x4}, {0x4, 0x1}, {0x1, 0x2}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x1, 0x5, 0x60, 0x6c, 0x0, 0xb, 0xb, 0x2, 0x16, 0x17, 0x4, 0x4, 0x6c, 0xf, 0xb, 0x2, 0x6c, 0x48, 0x48, 0x23, 0x16, 0x2fe377b8634d90b6, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf79e, 0x8000, 0x7, 0x9, 0x4, 0x6, 0x8000, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x0, 0x7, 0x7, 0x6f, 0x7, 0x7]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfffd, 0x7, 0x7, 0x8000, 0x10, 0x9, 0x878b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x8000, 0x8, 0x3, 0x9, 0x8000, 0x3fb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7ff, 0x741, 0xfffa, 0x8, 0x8001, 0x8, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x9, 0x6, 0x1000, 0x5, 0x5, 0xd1, 0x7]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x1, 0x7, 0x1, 0x9, 0x8, 0x2f2]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x8}, {0x4, 0xa}, {0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {}, {0x2, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x4, 0xc, 0x8, 0xe, 0x9, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x40, 0x6, 0x8, 0x0, 0x3, 0x800]}}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x278, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x3, 0x6, 0x1b, 0x9, 0x6, 0x6, 0x1, 0x5, 0x12, 0x5, 0x1b, 0x30, 0xb, 0x16, 0x9, 0x18, 0x36, 0x12, 0x3, 0x5, 0x16]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x5, 0x6, 0x24, 0x9, 0x1b, 0x6c]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0xc, 0x60, 0x0, 0x3, 0x5, 0x16, 0x3, 0x1, 0x30, 0x3, 0x48, 0x24, 0x16, 0xc, 0x7f, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0xb712, 0x9, 0x4, 0x9fe3, 0x2, 0x1000]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xefa1, 0x55, 0x4, 0x1, 0x6, 0x4e8, 0x52, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xac4, 0xdba6, 0x2, 0x3, 0xfff0, 0x7fff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x5, 0x5}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x3}, {0x7, 0x4}, {0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x6}, {0x4, 0x5}, {0x6}, {0x5, 0x6}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x3, 0x8}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0x9}, {0x4, 0x7}, {0x1}, {0x2, 0x6}, {0x4, 0x4}, {0x3, 0x4}, {0x7, 0x8}, {0x6, 0x4}, {0x7, 0x4}, {0x5, 0x2}, {0x5, 0x2}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x2}, {}, {0x3, 0x5}, {0x1, 0x2}, {0x1}, {0x6, 0x9}, {0x0, 0x5}, {0x5}, {0x0, 0xa}, {0x4, 0x8}, {0x2, 0x6}, {0x3, 0x8}, {0x6}, {0x7, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x7}, {0x6, 0x2}, {0x4, 0xa}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x6, 0x1}, {0x1}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x7, 0xa}, {0x6, 0x6}, {0x6, 0x6}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x1, 0x8}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0x1}, {0x1, 0x5}, {0x7, 0x9}, {0x3, 0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x2, 0x1, 0x2, 0xd, 0x16ef, 0x81, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0xa}, {}, {0x0, 0x6}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x4, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x7, 0x4}, {0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x5, 0x5}, {0x4, 0x2}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x3, 0x16, 0x2b, 0x60, 0x3, 0x5, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x33, 0x5, 0x12, 0x2, 0x3, 0x16, 0xc, 0x36, 0x1b, 0x1, 0x6, 0x1b, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x2}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x6}, {0x3, 0x6}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x1}, {0x4, 0x4}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x5, 0xa}, {0x2, 0x9}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x5}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x3}, {0x4, 0xa}, {0x1, 0x1}, {0x5, 0x2}, {0x6, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0x3}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {}, {0x7}, {0x2, 0x5}, {0x7, 0x7}, {0x3, 0x5}, {0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x36, 0x95, 0x36, 0x48, 0x36, 0x4, 0x6c, 0x6, 0x60, 0x48, 0x48, 0x9, 0x18, 0x23, 0x4, 0x60, 0xc, 0x1a, 0x0, 0x3, 0x4, 0x16, 0x5, 0x4, 0x6, 0x1b, 0x0, 0x24]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfe01, 0x8, 0xdd, 0x0, 0x2, 0x3f, 0x7]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x3}, {0x0, 0x7}, {0x7, 0x3}, {0x1}, {0x4}, {0x0, 0x8}, {0x2, 0x9}, {0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x6, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0xbb0}, 0x1, 0x0, 0x0, 0x90}, 0x48080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='virtio_transport_alloc_pkt\x00', r6}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r10, &(0x7f0000000440), 0x10) listen(r10, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 808.018634ms ago: executing program 2 (id=1809): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe72) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x33, 0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xd, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x10, 0xffffdffc}, 0x48) setresuid(0x0, 0x0, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mq_timedreceive(r5, &(0x7f00000001c0)=""/27, 0x1b, 0x40, &(0x7f0000000240)={0x0, 0x3938700}) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x1900}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x10}, &(0x7f00000002c0)=0xc) 567.742873ms ago: executing program 0 (id=1810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 567.172363ms ago: executing program 2 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 566.563973ms ago: executing program 1 (id=1812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e000000200000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}}, 0x0) 552.369534ms ago: executing program 3 (id=1813): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) (fail_nth: 6) 484.05244ms ago: executing program 2 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "184bf50cce38873b"}}}}}}}, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getlink={0x20, 0x12, 0x1}, 0x20}}, 0x0) 483.78705ms ago: executing program 1 (id=1815): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x20024b4, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r1 = open(&(0x7f0000000000)='./bus\x00', 0xb0000, 0x0) ftruncate(r1, 0x2007ffd) write$selinux_create(r1, &(0x7f0000000280)=@access={'system_u:object_r:faillog_t:s0', 0x20, '/sbin/dhclient'}, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) ioperm(0x0, 0x2, 0x5) lremovexattr(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000000c0)='f2fs_issue_reset_zone\x00'}, 0x10) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="81bc06956e90c30f558927ad0f56e0e25752757e31122283029df120ed098cc3a2b5669e6c3a8e955a2e106daf9a2b8be95d4d11b3fbe8a12c06effde8ea467c2e89fed2d50dee1501247ce94dcb9bcee34ff63f4afa9fae91e74c81dda8be1b10923deb89d495c30c24819e2d113afa77a49a782a052cef570db02fab109b69d9cc85e20e470392514662cde6853dedb465aaa1ca11ea162598a16a0c3bb1853a6eaf46569690791407e33dd1745800ed13228bc85a89d3e357bbb7043aea4ec6fe39bcc99ae420652e07fd5d99a435616df8670e6d25054a7e1e41bc6a3953d8a6", @ANYRES16=r3, @ANYBLOB="01000000000000000000040000000800090002000000"], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000300)=ANY=[], 0x118) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x4b49, &(0x7f0000000000)) 286.161516ms ago: executing program 3 (id=1816): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbe78968e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000000b0064e300000000"], 0x0) 237.95953ms ago: executing program 1 (id=1817): r0 = io_uring_setup(0x4822, &(0x7f00000004c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x48, 0x10, 0x7, 0xfd1, 0x0, 0x3e, 0x7, 0x2c, 0x38, 0x391, 0x9, 0x9ee, 0x20, 0x2, 0xf779, 0x7fff, 0x40}, [{0x6474e551, 0x3cee, 0x0, 0x0, 0x75, 0xffffffde, 0xa9b9, 0x5}, {0x60000000, 0x4d, 0x3ff, 0x9, 0x7f, 0x801, 0x7, 0xbb6bf1f}], "a0675dae0e04be006a7b176c66e0c88bb96b1cca0437aad662203d4a89dc5789f4d5da7032b5b5495861dc75523fada06818a802eb07ac6fec49c896ccaf1461b6a4357368be4f3ccaacb37b469303034c61b58f6b303d947ce93c5a2a907c396cfa535f2cc8217762b5a6d57b521ff3eb29b4152ba8c8e2f61dbae2e7ebbe44dde94b1487f0394af9ca7d0f36cdd151a836d88491202351ad", ['\x00', '\x00']}, 0x311) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004050}, 0x1) recvmsg$inet_nvme(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12002) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 184.082444ms ago: executing program 2 (id=1818): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x52}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x4, 0x0, 'queue1\x00', 0x5}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000040)) 183.771754ms ago: executing program 1 (id=1819): socket$unix(0x1, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') r0 = syz_clone(0x0, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x2c, &(0x7f0000000180), 0x5, 0x0, 0xffffffffffffff1f}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0500000000000000140012800b0001006970766c616e00400400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 173.373895ms ago: executing program 3 (id=1820): epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x335, &(0x7f0000000480)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x5670}, 0x3002, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000076000000bf0900000000000026090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b700000000000000950000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="b405000000000000711098000000000066000000000000009500000000000000bfd76ee96dd56ffd7713f23eab174876adbf83bb0c7c69b08047628a02bd43450c2c062a197aa28d2b15ba1ce55dcce2a591d27112605fb1cb1c4b991b8b4c99d4072b4314332d01b3440ca92fbbc2f05fc3e8a56e0b5e2726c66c81bdb056fb15ac175fb687525fc4c3837ffe49fa530cb9fa26bf2e0669a80913847be4735031c3fd6ebf87afa2704ca69854b9f0c99cea19baa7355d5fa8ef4429391c02"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x2, 0x7, 0x14800000, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x100, 0x3, 0x80000000, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r3], 0x0}, 0x90) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001380), 0x5}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000004f000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000003c0)={0x8}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x3}, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffe, 0x10001, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x5c8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000400)) 98.043801ms ago: executing program 4 (id=1821): socket$inet_udp(0x2, 0x2, 0x0) setitimer(0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x3e}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c006, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x100) rmdir(&(0x7f0000000100)='./control\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbe78968e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x0, 0x7fffffffffffffff]}) 0s ago: executing program 1 (id=1822): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000010c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe72) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x33, 0x0, 0x0) socketpair(0x0, 0x6, 0x7, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xd, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x10, 0xffffdffc}, 0x48) setresuid(0x0, 0x0, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mq_timedreceive(r5, &(0x7f00000001c0)=""/27, 0x1b, 0x40, &(0x7f0000000240)={0x0, 0x3938700}) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x1900}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x10}, &(0x7f00000002c0)=0xc) kernel console output (not intermixed with test programs): o avoid problems! [ 165.648394][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.658838][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.668669][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.679098][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.688913][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.699396][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.710519][T10870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.723760][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.734266][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.744122][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.754739][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.764582][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.775176][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.785039][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.795899][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.860445][T10870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.869374][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1471'. [ 165.897348][T10870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.906145][T10870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.914925][T10870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.923722][T10870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.013662][T10896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.033267][T10896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.042883][T10896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.093436][T10896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.182058][T10981] loop0: detected capacity change from 0 to 8192 [ 166.201299][T10896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.281670][ T3393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.307340][T10896] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.317437][ T9293] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.324510][ T9293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.349599][ T9293] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.356690][ T9293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.439697][T10896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.517912][T11015] loop0: detected capacity change from 0 to 512 [ 166.524956][T11006] loop3: detected capacity change from 0 to 8192 [ 166.582477][T10896] veth0_vlan: entered promiscuous mode [ 166.597103][T10896] veth1_vlan: entered promiscuous mode [ 166.610933][T10990] chnl_net:caif_netlink_parms(): no params data found [ 166.666943][T10896] veth0_macvtap: entered promiscuous mode [ 166.673513][T10990] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.680645][T10990] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.688305][T10990] bridge_slave_0: entered allmulticast mode [ 166.695045][T10990] bridge_slave_0: entered promiscuous mode [ 166.703404][T10896] veth1_macvtap: entered promiscuous mode [ 166.711674][T10990] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.718772][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.727148][T10990] bridge_slave_1: entered allmulticast mode [ 166.733859][T10990] bridge_slave_1: entered promiscuous mode [ 166.752762][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.763299][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.773216][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.783646][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.793462][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.803887][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.813693][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.824230][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.834116][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.844651][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.855572][T10896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.876981][T11029] loop0: detected capacity change from 0 to 8192 [ 166.891151][T10990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.902386][T10990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.922037][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.932531][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.942434][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.953022][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.962964][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.973527][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.983510][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.993940][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.003775][T10896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.014271][T10896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.038159][T10896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.057935][T10990] team0: Port device team_slave_0 added [ 167.065787][T10896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.074680][T10896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.083442][T10896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.092307][T10896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.107764][T10990] team0: Port device team_slave_1 added [ 167.136266][T10990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.143316][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.169507][T10990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.184589][T10990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.191663][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.217898][T10990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.248720][T11035] loop0: detected capacity change from 0 to 1024 [ 167.276237][T11035] EXT4-fs: Ignoring removed orlov option [ 167.308932][T11035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.339997][T11035] EXT4-fs error (device loop0): __ext4_iget:4985: inode #12: block 17104912: comm syz.0.1482: invalid block [ 167.354415][T11045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1485'. [ 167.377489][T10990] hsr_slave_0: entered promiscuous mode [ 167.386648][T10990] hsr_slave_1: entered promiscuous mode [ 167.388456][T11046] EXT4-fs error (device loop0): __ext4_iget:4985: inode #12: block 17104912: comm syz.0.1482: invalid block [ 167.403955][T10990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.413562][T11035] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 16: comm syz.0.1482: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=9, size=1024 fake=0 [ 167.417981][T10990] Cannot create hsr debugfs directory [ 167.454484][T11035] EXT4-fs error (device loop0): __ext4_iget:4985: inode #12: block 17104912: comm syz.0.1482: invalid block [ 167.541410][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 167.552050][T11057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11057 comm=syz.1.1487 [ 167.587714][T11059] loop3: detected capacity change from 0 to 8192 [ 167.599475][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1489'. [ 167.910919][T10870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.935110][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 167.973566][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1494'. [ 168.103502][T11082] loop0: detected capacity change from 0 to 512 [ 168.117641][T11082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.130301][T11082] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.142460][T11079] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.1494: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 168.160501][T11079] EXT4-fs (loop0): Remounting filesystem read-only [ 168.252135][T10870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.339468][T11092] loop0: detected capacity change from 0 to 8192 [ 168.735950][T11105] loop3: detected capacity change from 0 to 512 [ 168.742652][T11105] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.755538][T11105] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 168.774560][T11105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 168.782902][T11105] System zones: 1-12 [ 168.787684][T11105] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1500: corrupted in-inode xattr: e_value size too large [ 168.805367][T11105] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1500: couldn't read orphan inode 15 (err -117) [ 168.819049][T11105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.842518][T10230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.899102][T11111] loop3: detected capacity change from 0 to 8192 [ 169.150814][ T3393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.204917][ T3393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.280147][ T3393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.352583][T11116] cgroup: Invalid name [ 169.372512][ T3393] bridge_slave_1: left allmulticast mode [ 169.378283][ T3393] bridge_slave_1: left promiscuous mode [ 169.383933][ T3393] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.392677][ T3393] bridge_slave_0: left allmulticast mode [ 169.398363][ T3393] bridge_slave_0: left promiscuous mode [ 169.404084][ T3393] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.558927][ T3393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.580418][ T3393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.604148][ T3393] bond0 (unregistering): Released all slaves [ 169.631537][T11125] loop1: detected capacity change from 0 to 2048 [ 169.647360][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'. [ 169.656369][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'. [ 169.661360][T11125] EXT4-fs: Invalid want_extra_isize 2 [ 169.665515][T11122] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 169.714932][T11122] bond1: entered allmulticast mode [ 169.719250][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 169.719262][ T29] audit: type=1400 audit(1723379353.620:1756): avc: denied { mounton } for pid=11123 comm="syz.1.1505" path="/6/file0" dev="proc" ino=4026533118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 169.743513][T11122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.762244][T11125] 9pnet_fd: Insufficient options for proto=fd [ 169.845943][ T3393] hsr_slave_0: left promiscuous mode [ 169.870383][ T3393] hsr_slave_1: left promiscuous mode [ 169.878146][ T3393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.885576][ T3393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.904501][ T3393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.912026][ T3393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.937962][ T3393] veth1_macvtap: left promiscuous mode [ 169.943465][ T3393] veth0_macvtap: left promiscuous mode [ 169.949090][ T3393] veth1_vlan: left promiscuous mode [ 169.954394][ T3393] veth0_vlan: left promiscuous mode [ 170.206183][ T3393] team0 (unregistering): Port device team_slave_1 removed [ 170.218319][ T3393] team0 (unregistering): Port device team_slave_0 removed [ 170.323659][ T29] audit: type=1326 audit(1723379354.220:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11160 comm="syz.4.1514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b4c3479f9 code=0x0 [ 170.489876][ T29] audit: type=1400 audit(1723379354.390:1758): avc: denied { ioctl } for pid=11160 comm="syz.4.1514" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 170.547518][T11180] loop1: detected capacity change from 0 to 1024 [ 170.556360][T10990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.582469][T10990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.590587][T11180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.604703][T10990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.613741][T10990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.673245][T10990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.677210][T11180] loop1: detected capacity change from 1024 to 1023 [ 170.687298][T10990] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.717919][ T9291] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.725116][ T9291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.732836][T10896] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /7/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 170.765649][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.772751][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.775610][T10896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.833699][T11197] loop0: detected capacity change from 0 to 8192 [ 170.847382][ T3393] bridge_slave_1: left allmulticast mode [ 170.853137][ T3393] bridge_slave_1: left promiscuous mode [ 170.858852][ T3393] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.878768][ T3393] bridge_slave_0: left allmulticast mode [ 170.884443][ T3393] bridge_slave_0: left promiscuous mode [ 170.890769][ T3393] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.039085][ T3393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.049906][ T3393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.060955][ T3393] bond0 (unregistering): Released all slaves [ 171.071138][ T3393] bond1 (unregistering): Released all slaves [ 171.080841][ T3393] bond2 (unregistering): Released all slaves [ 171.094724][T11205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1519'. [ 171.122377][T10990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.212667][T10990] veth0_vlan: entered promiscuous mode [ 171.225569][ T3393] hsr_slave_0: left promiscuous mode [ 171.248299][T11219] loop4: detected capacity change from 0 to 1024 [ 171.256265][ T3393] hsr_slave_1: left promiscuous mode [ 171.261982][T11219] EXT4-fs: Ignoring removed nobh option [ 171.271683][ T3393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.279182][ T3393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.288783][ T3393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.296279][ T3393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.303986][T11219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.319209][ T3393] veth1_macvtap: left promiscuous mode [ 171.324713][ T3393] veth0_macvtap: left promiscuous mode [ 171.330410][ T3393] veth1_vlan: left promiscuous mode [ 171.335664][ T3393] veth0_vlan: left promiscuous mode [ 171.376541][T11224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11224 comm=syz.4.1522 [ 171.452266][ T3393] team0 (unregistering): Port device team_slave_1 removed [ 171.464869][ T3393] team0 (unregistering): Port device team_slave_0 removed [ 171.517243][T10990] veth1_vlan: entered promiscuous mode [ 171.535686][T10990] veth0_macvtap: entered promiscuous mode [ 171.546057][T10990] veth1_macvtap: entered promiscuous mode [ 171.561193][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.571676][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.581585][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.592114][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.602130][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.612606][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.622457][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.632878][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.644353][T10990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.654714][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.665382][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.675264][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.686348][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.696237][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.706658][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.716516][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.726946][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.737906][T10990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.748360][T10990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.757151][T10990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.766023][T10990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.774759][T10990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.819305][T11228] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1523'. [ 171.828380][T11228] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1523'. [ 171.992035][T11243] loop0: detected capacity change from 0 to 256 [ 172.202160][T10551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.227702][T11260] loop3: detected capacity change from 0 to 8192 [ 172.255673][T11261] loop0: detected capacity change from 0 to 8192 [ 173.058208][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.070841][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.212165][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.219297][T11275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.234308][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.241464][T11275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.444650][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.589799][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.642649][T11286] loop2: detected capacity change from 0 to 512 [ 173.706878][T11286] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.746879][T11286] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 173.758926][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.799964][T11286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 173.819012][T11286] System zones: 1-12 [ 173.828792][T11286] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1543: corrupted in-inode xattr: e_value size too large [ 173.882523][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.889492][T11286] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1543: couldn't read orphan inode 15 (err -117) [ 173.925452][T11293] loop0: detected capacity change from 0 to 512 [ 173.971416][T11286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.971889][T11293] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.054059][ T50] bridge_slave_1: left allmulticast mode [ 174.060910][ T50] bridge_slave_1: left promiscuous mode [ 174.066743][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.086676][T11293] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 174.115280][T11293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 174.119772][T11286] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.1543: Unrecognised inode hash code 4 [ 174.134565][T11286] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1543: Corrupt directory, running e2fsck is recommended [ 174.137143][T11293] System zones: 1-12 [ 174.156545][ T50] bridge_slave_0: left allmulticast mode [ 174.162205][ T50] bridge_slave_0: left promiscuous mode [ 174.168057][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.178827][T11293] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1542: corrupted in-inode xattr: e_value size too large [ 174.243093][T11293] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1542: couldn't read orphan inode 15 (err -117) [ 174.243648][T11286] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.1543: Unrecognised inode hash code 4 [ 174.266371][T11286] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1543: Corrupt directory, running e2fsck is recommended [ 174.266980][T11293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.390233][T10870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.437935][T10990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.477455][T11303] __nla_validate_parse: 2 callbacks suppressed [ 174.477470][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'. [ 174.759584][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.805359][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.831739][ T50] bond0 (unregistering): Released all slaves [ 174.909032][T11297] bridge1: entered promiscuous mode [ 174.914415][T11297] bridge1: entered allmulticast mode [ 174.990058][ T50] hsr_slave_0: left promiscuous mode [ 175.010354][ T50] hsr_slave_1: left promiscuous mode [ 175.037467][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.044904][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.116897][ T29] audit: type=1326 audit(1723379358.990:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11320 comm="syz.2.1548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f969fa779f9 code=0x0 [ 175.130559][T11324] loop4: detected capacity change from 0 to 1024 [ 175.167804][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.175296][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.243068][ T50] veth1_macvtap: left promiscuous mode [ 175.248618][ T50] veth0_macvtap: left promiscuous mode [ 175.254116][ T50] veth1_vlan: left promiscuous mode [ 175.259420][ T50] veth0_vlan: left promiscuous mode [ 175.273456][T11324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.307895][T11328] loop3: detected capacity change from 0 to 8192 [ 175.569254][ T29] audit: type=1400 audit(1723379359.460:1760): avc: denied { accept } for pid=11335 comm="syz.0.1551" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 175.615635][T11339] dccp_close: ABORT with 48 bytes unread [ 175.662366][T10551] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /23/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 175.723299][T10551] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 175.868441][T10551] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /23/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 175.928935][T10551] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 176.039277][T10551] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /23/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 176.077021][T10551] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 176.103366][T10551] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /23/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 176.126988][ T50] team0 (unregistering): Port device team_slave_1 removed [ 176.133183][T10551] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 176.150399][T11352] loop2: detected capacity change from 0 to 256 [ 176.158508][T10551] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /23/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 176.185031][T10551] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 176.206742][T11352] msdos: Unknown parameter '0xffffffffffffffff' [ 176.206889][ T50] team0 (unregistering): Port device team_slave_0 removed [ 176.250009][T11352] loop2: detected capacity change from 0 to 256 [ 176.260423][T11352] vfat: Unknown parameter '017777777777777777777770xffffffffffffffffÿÿÿÿÿÿÿÿ00000000000000000000ÿÿÿ18446744073709551615ÿÿ' [ 176.598027][T11345] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1554'. [ 176.608093][T11345] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1554'. [ 176.646385][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 176.957819][T10551] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.970816][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 177.118767][T11364] loop3: detected capacity change from 0 to 8192 [ 177.362464][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.464073][T11279] chnl_net:caif_netlink_parms(): no params data found [ 177.503427][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.635708][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.731984][T11279] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.739486][T11279] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.746934][T11279] bridge_slave_0: entered allmulticast mode [ 177.754179][T11279] bridge_slave_0: entered promiscuous mode [ 177.814825][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.865007][T11279] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.876792][T11279] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.928029][T11279] bridge_slave_1: entered allmulticast mode [ 177.938770][T11279] bridge_slave_1: entered promiscuous mode [ 177.989995][ T29] audit: type=1400 audit(1723379361.890:1761): avc: denied { write } for pid=11391 comm="syz.0.1565" path="socket:[43450]" dev="sockfs" ino=43450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.074962][T11279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.181887][T11279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.226317][ T50] bridge_slave_1: left allmulticast mode [ 178.231969][ T50] bridge_slave_1: left promiscuous mode [ 178.238164][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.309882][ T50] bridge_slave_0: left allmulticast mode [ 178.315537][ T50] bridge_slave_0: left promiscuous mode [ 178.321490][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.409750][ T29] audit: type=1326 audit(1723379362.310:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 178.531088][ T29] audit: type=1326 audit(1723379362.310:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 178.557073][ T29] audit: type=1326 audit(1723379362.330:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d6e839817 code=0x7ffc0000 [ 178.581563][ T29] audit: type=1326 audit(1723379362.330:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 178.606604][ T29] audit: type=1326 audit(1723379362.330:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 178.631404][ T29] audit: type=1326 audit(1723379362.330:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 178.656181][ T29] audit: type=1326 audit(1723379362.330:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 178.764636][T11420] dccp_close: ABORT with 48 bytes unread [ 178.985370][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.006171][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.031345][ T50] bond0 (unregistering): Released all slaves [ 179.043166][ T50] bond1 (unregistering): Released all slaves [ 179.142965][T11412] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 179.182963][ T50] hsr_slave_0: left promiscuous mode [ 179.234534][ T50] hsr_slave_1: left promiscuous mode [ 179.265248][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.273082][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.315588][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.323317][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.426192][ T50] veth1_macvtap: left promiscuous mode [ 179.431733][ T50] veth0_macvtap: left promiscuous mode [ 179.438023][ T50] veth1_vlan: left promiscuous mode [ 179.443320][ T50] veth0_vlan: left promiscuous mode [ 179.722052][ T50] team0 (unregistering): Port device team_slave_1 removed [ 179.809061][ T50] team0 (unregistering): Port device team_slave_0 removed [ 179.887054][T11279] team0: Port device team_slave_0 added [ 180.072410][T11279] team0: Port device team_slave_1 added [ 180.190641][T11279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.197630][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.223720][T11279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.299996][T11279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.307458][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.333451][T11279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.423401][T11455] loop0: detected capacity change from 0 to 8192 [ 180.447225][T11457] loop2: detected capacity change from 0 to 128 [ 180.455398][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 180.455411][ T29] audit: type=1400 audit(1723379364.350:1786): avc: denied { mounton } for pid=11454 comm="syz.2.1576" path="/15/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 180.509893][T11279] hsr_slave_0: entered promiscuous mode [ 180.527077][T11279] hsr_slave_1: entered promiscuous mode [ 180.535480][T11279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.544840][T11279] Cannot create hsr debugfs directory [ 181.173750][T11376] chnl_net:caif_netlink_parms(): no params data found [ 181.246694][ T29] audit: type=1400 audit(1723379365.150:1787): avc: denied { read } for pid=11467 comm="syz.3.1577" name="file0" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.376379][T11474] dccp_close: ABORT with 48 bytes unread [ 181.745102][ T29] audit: type=1326 audit(1723379365.640:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 181.807078][ T29] audit: type=1326 audit(1723379365.670:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d6e839817 code=0x7ffc0000 [ 181.830650][ T29] audit: type=1326 audit(1723379365.670:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 181.858363][ T29] audit: type=1326 audit(1723379365.670:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 181.883077][ T29] audit: type=1326 audit(1723379365.670:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 181.908664][ T29] audit: type=1326 audit(1723379365.680:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 181.932734][ T29] audit: type=1326 audit(1723379365.680:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 181.956363][ T29] audit: type=1326 audit(1723379365.680:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8d6e8379f9 code=0x7ffc0000 [ 182.107786][T11376] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.114924][T11376] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.140328][T11376] bridge_slave_0: entered allmulticast mode [ 182.154607][T11376] bridge_slave_0: entered promiscuous mode [ 182.163927][T11499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1581'. [ 182.180641][T11376] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.187803][T11376] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.196612][T11376] bridge_slave_1: entered allmulticast mode [ 182.203397][T11376] bridge_slave_1: entered promiscuous mode [ 182.300245][T11279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.314209][T11279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.342941][T11279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.358504][T11376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.372261][T11376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.381618][T11503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1582'. [ 182.391110][T11279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.455570][T11376] team0: Port device team_slave_0 added [ 182.506766][T11376] team0: Port device team_slave_1 added [ 182.587539][T11376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.594556][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.621072][T11376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.640866][T11376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.648047][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.673951][T11376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.732069][T11376] hsr_slave_0: entered promiscuous mode [ 182.738661][T11376] hsr_slave_1: entered promiscuous mode [ 182.745013][T11376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.752990][T11376] Cannot create hsr debugfs directory [ 183.054982][T11522] loop3: detected capacity change from 0 to 8192 [ 183.094474][T11279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.270294][T11279] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.307861][ T3393] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.314972][ T3393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.391144][ T9291] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.398269][ T9291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.769605][T11376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.820616][T11376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.877032][T11376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.904699][T11376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.267361][T11558] loop3: detected capacity change from 0 to 1764 [ 184.324137][T11558] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 184.441372][T11376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.531242][T11376] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.567156][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.574235][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.623857][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.630951][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.675742][T11569] loop3: detected capacity change from 0 to 8192 [ 184.851751][T11279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.852182][T11575] loop0: detected capacity change from 0 to 512 [ 184.880562][T11575] dccp_invalid_packet: P.Data Offset(0) too small [ 185.692927][T11376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.945172][T11279] veth0_vlan: entered promiscuous mode [ 186.000460][T11604] loop0: detected capacity change from 0 to 8192 [ 186.026539][T11279] veth1_vlan: entered promiscuous mode [ 186.165172][T11279] veth0_macvtap: entered promiscuous mode [ 186.221818][T11279] veth1_macvtap: entered promiscuous mode [ 186.344407][T11615] loop3: detected capacity change from 0 to 1024 [ 186.353166][T11615] EXT4-fs: Ignoring removed orlov option [ 186.365446][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.376460][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.386292][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.396733][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.406622][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.417195][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.456596][T11615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.533243][T11279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.550809][T10230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.595422][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.606854][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.617588][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.628867][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.639665][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.651047][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.673501][T11279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.716195][T11279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.724939][T11279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.733708][T11279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.743635][T11279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.793067][T11628] loop3: detected capacity change from 0 to 512 [ 186.841097][T11628] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1604'. [ 187.076165][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 187.076177][ T29] audit: type=1326 audit(1723379370.960:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.098667][T11628] loop3: detected capacity change from 0 to 8192 [ 187.107186][ T29] audit: type=1326 audit(1723379370.960:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.137476][ T29] audit: type=1326 audit(1723379370.960:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f969fa79817 code=0x7ffc0000 [ 187.162155][ T29] audit: type=1326 audit(1723379370.960:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.186462][ T29] audit: type=1326 audit(1723379370.960:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.189163][T11628] vfat: Unknown parameter '0xffffffffffffffffÿ' [ 187.210189][ T29] audit: type=1326 audit(1723379370.960:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.210385][ T29] audit: type=1326 audit(1723379370.960:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.264546][ T29] audit: type=1326 audit(1723379370.960:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.288589][ T29] audit: type=1326 audit(1723379370.960:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.312233][ T29] audit: type=1326 audit(1723379370.960:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 187.530108][T11643] loop1: detected capacity change from 0 to 512 [ 187.565209][T11643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.696227][T11643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 187.762384][T11643] System zones: 1-12 [ 187.786214][T11643] EXT4-fs (loop1): 1 truncate cleaned up [ 187.792263][T11643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.947160][T11660] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1608'. [ 188.252388][T11279] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.503602][T11678] loop1: detected capacity change from 0 to 8192 [ 188.531852][T11376] veth0_vlan: entered promiscuous mode [ 188.572083][T11376] veth1_vlan: entered promiscuous mode [ 188.642726][T11683] FAULT_INJECTION: forcing a failure. [ 188.642726][T11683] name failslab, interval 1, probability 0, space 0, times 0 [ 188.655524][T11683] CPU: 1 UID: 0 PID: 11683 Comm: syz.0.1612 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 188.666339][T11683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 188.676398][T11683] Call Trace: [ 188.679675][T11683] [ 188.682622][T11683] dump_stack_lvl+0xf2/0x150 [ 188.687249][T11683] dump_stack+0x15/0x20 [ 188.691514][T11683] should_fail_ex+0x229/0x230 [ 188.696204][T11683] ? ep_insert+0x2c9/0xd20 [ 188.700647][T11683] should_failslab+0x8f/0xb0 [ 188.705286][T11683] kmem_cache_alloc_noprof+0x4c/0x290 [ 188.710666][T11683] ep_insert+0x2c9/0xd20 [ 188.715018][T11683] ? security_capable+0x64/0x80 [ 188.719899][T11683] do_epoll_ctl+0x628/0x950 [ 188.724424][T11683] __x64_sys_epoll_ctl+0xc6/0xf0 [ 188.729465][T11683] x64_sys_call+0x27c9/0x2d60 [ 188.734176][T11683] do_syscall_64+0xc9/0x1c0 [ 188.738718][T11683] ? clear_bhb_loop+0x55/0xb0 [ 188.743397][T11683] ? clear_bhb_loop+0x55/0xb0 [ 188.748220][T11683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.754193][T11683] RIP: 0033:0x7f8d6e8379f9 [ 188.758693][T11683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.778305][T11683] RSP: 002b:00007f8d6d4b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 188.786768][T11683] RAX: ffffffffffffffda RBX: 00007f8d6e9c5f80 RCX: 00007f8d6e8379f9 [ 188.794740][T11683] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 188.802794][T11683] RBP: 00007f8d6d4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.803481][T11376] veth0_macvtap: entered promiscuous mode [ 188.810767][T11683] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 188.810782][T11683] R13: 0000000000000000 R14: 00007f8d6e9c5f80 R15: 00007ffcfc6ff8d8 [ 188.832516][T11683] [ 188.906829][T11376] veth1_macvtap: entered promiscuous mode [ 188.968231][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.979041][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.988847][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.999293][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.009152][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.020108][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.030412][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.041489][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.122282][T11376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.143782][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.154334][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.164156][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.174661][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.184495][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.195731][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.205660][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.217551][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.275586][T11693] loop0: detected capacity change from 0 to 1024 [ 189.367978][T11693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.403071][T11376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.421683][T11376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.431412][T11376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.441222][T11376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.450930][T11376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.475473][T11707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.482714][T11707] IPv6: NLM_F_CREATE should be set when creating new route [ 190.009116][T11720] loop1: detected capacity change from 0 to 256 [ 190.142572][T11726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1562'. [ 190.183486][T11727] loop2: detected capacity change from 0 to 512 [ 190.194124][T10870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.210180][T11727] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1621'. [ 190.401434][T11727] loop2: detected capacity change from 0 to 8192 [ 190.415359][T11727] vfat: Unknown parameter '0xffffffffffffffffÿ' [ 190.542310][T11740] loop3: detected capacity change from 0 to 8192 [ 191.311513][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1638'. [ 191.661070][T11785] loop4: detected capacity change from 0 to 512 [ 191.703449][T11785] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 191.737122][T11793] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1633'. [ 191.746226][T11793] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1633'. [ 191.776961][T11785] EXT4-fs (loop4): 1 truncate cleaned up [ 191.816707][T11785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.895861][T11796] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.902990][T11796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.924486][T11376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.938872][T11796] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.945966][T11796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.222212][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 192.222226][ T29] audit: type=1400 audit(1723379376.120:1957): avc: denied { mount } for pid=11809 comm="syz.0.1639" name="/" dev="configfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 192.251794][ T29] audit: type=1400 audit(1723379376.120:1958): avc: denied { search } for pid=11809 comm="syz.0.1639" name="/" dev="configfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.314536][T11819] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1652'. [ 192.382699][T11822] loop3: detected capacity change from 0 to 128 [ 192.432583][T11822] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.449289][ T29] audit: type=1326 audit(1723379376.330:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 192.473350][ T29] audit: type=1326 audit(1723379376.330:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f969fa79817 code=0x7ffc0000 [ 192.497582][ T29] audit: type=1326 audit(1723379376.330:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 192.522059][ T29] audit: type=1326 audit(1723379376.330:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 192.545845][ T29] audit: type=1326 audit(1723379376.330:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 192.566429][T11819] loop4: detected capacity change from 0 to 8192 [ 192.569542][ T29] audit: type=1326 audit(1723379376.330:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 192.600212][ T29] audit: type=1326 audit(1723379376.330:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 192.624070][ T29] audit: type=1326 audit(1723379376.330:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 192.697666][T11822] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.969752][T11822] loop3: detected capacity change from 128 to 64 [ 193.073157][T11842] loop0: detected capacity change from 0 to 1024 [ 193.105575][T11842] EXT4-fs: Ignoring removed orlov option [ 193.111297][T11842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.201992][T11847] 9pnet_fd: Insufficient options for proto=fd [ 193.205362][T11842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.217978][T11846] loop1: detected capacity change from 0 to 1024 [ 193.243950][T11846] EXT4-fs: Ignoring removed orlov option [ 193.296458][T11846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.356122][T10230] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 193.403607][T10870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.410275][T10230] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 193.468913][T10230] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.487076][T10230] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 193.506384][T10230] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #13: comm syz-executor: mark_inode_dirty error [ 193.526486][T10230] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.552507][T11279] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.566995][T10230] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.581014][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 193.610482][T10230] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.639951][T10230] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.691517][T10230] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.727210][T10230] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.742581][T11868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1651'. [ 193.768289][T10230] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.804135][T11871] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1655'. [ 193.815739][T10230] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 193.841619][T10230] EXT4-fs warning (device loop3): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 194.027445][T11882] loop0: detected capacity change from 0 to 128 [ 194.071947][T11882] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.109944][T11882] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.146662][ T3393] kworker/u8:7: attempt to access beyond end of device [ 194.146662][ T3393] loop3: rw=1, sector=124, nr_sectors = 2 limit=64 [ 194.183292][ T3393] kworker/u8:7: attempt to access beyond end of device [ 194.183292][ T3393] loop3: rw=1, sector=74, nr_sectors = 6 limit=64 [ 194.225627][ T3393] kworker/u8:7: attempt to access beyond end of device [ 194.225627][ T3393] loop3: rw=1, sector=80, nr_sectors = 2 limit=64 [ 194.255481][ T3393] kworker/u8:7: attempt to access beyond end of device [ 194.255481][ T3393] loop3: rw=1, sector=114, nr_sectors = 6 limit=64 [ 194.282565][ T3393] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 194.310631][ T9291] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 194.324856][ T3393] EXT4-fs error (device loop3): ext4_convert_unwritten_extents:4854: inode #14: comm kworker/u8:7: mark_inode_dirty error [ 194.324996][ T9291] EXT4-fs error (device loop3): ext4_convert_unwritten_extents:4854: inode #14: comm kworker/u8:22: mark_inode_dirty error [ 194.342436][ T3393] Buffer I/O error on device loop3, logical block 57 [ 194.357135][ T3393] Buffer I/O error on device loop3, logical block 58 [ 194.363875][ T3393] Buffer I/O error on device loop3, logical block 59 [ 194.370942][ T3393] Buffer I/O error on device loop3, logical block 40 [ 194.379592][ T9291] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 194.379954][ T3393] kworker/u8:7: attempt to access beyond end of device [ 194.379954][ T3393] loop3: rw=1, sector=120, nr_sectors = 2 limit=64 [ 194.392691][ T9291] Buffer I/O error on device loop3, logical block 62 [ 194.413877][ T3393] kworker/u8:7: attempt to access beyond end of device [ 194.413877][ T3393] loop3: rw=1, sector=82, nr_sectors = 32 limit=64 [ 194.419215][ T9291] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 194.428442][T11882] loop0: detected capacity change from 128 to 64 [ 194.442879][ T3393] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 194.466362][ T9291] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 194.473592][ T3393] Buffer I/O error on device loop3, logical block 41 [ 194.480420][ T9291] Buffer I/O error on device loop3, logical block 37 [ 194.485638][ T3393] Buffer I/O error on device loop3, logical block 42 [ 194.492276][ T9291] Buffer I/O error on device loop3, logical block 38 [ 194.492287][ T9291] Buffer I/O error on device loop3, logical block 39 [ 194.544885][ T9291] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 194.591969][T11252] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.633521][T11896] FAULT_INJECTION: forcing a failure. [ 194.633521][T11896] name failslab, interval 1, probability 0, space 0, times 0 [ 194.647195][T11896] CPU: 1 UID: 0 PID: 11896 Comm: syz.1.1659 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 194.658051][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 194.668296][T11896] Call Trace: [ 194.671634][T11896] [ 194.674615][T11896] dump_stack_lvl+0xf2/0x150 [ 194.679223][T11896] dump_stack+0x15/0x20 [ 194.683380][T11896] should_fail_ex+0x229/0x230 [ 194.688099][T11896] ? wakeup_source_register+0x3b/0x250 [ 194.693595][T11896] should_failslab+0x8f/0xb0 [ 194.698256][T11896] __kmalloc_cache_noprof+0x4b/0x2a0 [ 194.703535][T11896] wakeup_source_register+0x3b/0x250 [ 194.708854][T11896] ep_insert+0x7da/0xd20 [ 194.713093][T11896] do_epoll_ctl+0x628/0x950 [ 194.717592][T11896] __x64_sys_epoll_ctl+0xc6/0xf0 [ 194.722645][T11896] x64_sys_call+0x27c9/0x2d60 [ 194.727315][T11896] do_syscall_64+0xc9/0x1c0 [ 194.731916][T11896] ? clear_bhb_loop+0x55/0xb0 [ 194.736584][T11896] ? clear_bhb_loop+0x55/0xb0 [ 194.741250][T11896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.747133][T11896] RIP: 0033:0x7f4ecb4079f9 [ 194.751614][T11896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.771251][T11896] RSP: 002b:00007f4eca087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 194.779653][T11896] RAX: ffffffffffffffda RBX: 00007f4ecb595f80 RCX: 00007f4ecb4079f9 [ 194.787618][T11896] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 194.795583][T11896] RBP: 00007f4eca087090 R08: 0000000000000000 R09: 0000000000000000 [ 194.803571][T11896] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 194.811602][T11896] R13: 0000000000000000 R14: 00007f4ecb595f80 R15: 00007ffed4a8e558 [ 194.819700][T11896] [ 194.871930][T10870] syz-executor: attempt to access beyond end of device [ 194.871930][T10870] loop0: rw=12288, sector=70, nr_sectors = 2 limit=64 [ 194.903066][T10870] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #2: block 35: comm syz-executor: unable to read itable block [ 194.929004][T10870] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 194.941120][T10870] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 194.964252][T10870] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 194.974367][T10870] EXT4-fs error (device loop0): __ext4_unlink:3275: inode #13: comm syz-executor: mark_inode_dirty error [ 195.089576][T11908] loop2: detected capacity change from 0 to 1024 [ 195.098466][T11908] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 195.110404][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1664'. [ 195.120442][T11909] dccp_close: ABORT with 48 bytes unread [ 195.161417][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1667'. [ 195.229758][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.238196][T11921] kworker/u8:33: attempt to access beyond end of device [ 195.238196][T11921] loop0: rw=1, sector=124, nr_sectors = 2 limit=64 [ 195.239458][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.251560][T11921] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 14 starting block 62) [ 195.276360][T11921] kworker/u8:33: attempt to access beyond end of device [ 195.276360][T11921] loop0: rw=1, sector=74, nr_sectors = 6 limit=64 [ 195.289733][T11921] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 14 starting block 37) [ 195.302937][T11921] kworker/u8:33: attempt to access beyond end of device [ 195.302937][T11921] loop0: rw=1, sector=80, nr_sectors = 2 limit=64 [ 195.316344][T11921] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 14 starting block 40) [ 195.328307][T11921] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 14 starting block 57) [ 195.341931][T11921] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 195.342701][ T9259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.352115][T11915] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 195.372068][T11921] EXT4-fs error (device loop0): ext4_convert_unwritten_extents:4854: inode #14: comm kworker/u8:33: mark_inode_dirty error [ 195.385216][T11915] EXT4-fs error (device loop0): ext4_convert_unwritten_extents:4854: inode #14: comm kworker/u8:29: mark_inode_dirty error [ 195.400414][T11921] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 14 starting block 60) [ 195.407082][T11915] EXT4-fs (loop0): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 195.411900][T11921] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 14 starting block 41) [ 195.425126][T11915] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 195.446334][T11915] EXT4-fs (loop0): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 195.460879][T11915] EXT4-fs (loop0): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 195.464738][T11934] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.475027][T10870] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.480528][T11934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.500505][T11934] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.507618][T11934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.560422][ T9259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.572067][T11946] loop2: detected capacity change from 0 to 8192 [ 195.579555][T11944] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1670'. [ 195.621015][ T9259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.633248][T11952] loop1: detected capacity change from 0 to 128 [ 195.659252][T11952] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.677013][T11952] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.712230][ T9259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.812833][T11926] chnl_net:caif_netlink_parms(): no params data found [ 195.831087][ T9259] bridge_slave_1: left allmulticast mode [ 195.836845][ T9259] bridge_slave_1: left promiscuous mode [ 195.842570][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.864927][ T9259] bridge_slave_0: left allmulticast mode [ 195.870750][ T9259] bridge_slave_0: left promiscuous mode [ 195.876400][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.925984][T11952] loop1: detected capacity change from 128 to 64 [ 195.979292][ T9259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.990667][ T9259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.001505][ T9259] bond0 (unregistering): Released all slaves [ 196.011586][ T9259] bond1 (unregistering): Released all slaves [ 196.073634][T11279] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 196.085240][T11279] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 196.100543][T11279] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.115057][T11279] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 196.124485][T11279] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #13: comm syz-executor: mark_inode_dirty error [ 196.124587][ T9259] hsr_slave_0: left promiscuous mode [ 196.136370][T11279] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.154886][T11279] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.169747][T11279] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.183830][T11279] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.197925][ T9259] hsr_slave_1: left promiscuous mode [ 196.203805][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.211241][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.219104][T11279] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.232767][T11279] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.247369][T11279] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.247520][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.261405][T11279] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.268097][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.283431][T11279] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #13: lblock 0: comm syz-executor: error -12 reading directory block [ 196.306218][ T9259] veth1_macvtap: left promiscuous mode [ 196.311781][ T9259] veth0_macvtap: left promiscuous mode [ 196.317291][ T9259] veth1_vlan: left promiscuous mode [ 196.322521][ T9259] veth0_vlan: left promiscuous mode [ 196.418124][ T9259] team0 (unregistering): Port device team_slave_1 removed [ 196.429791][ T9259] team0 (unregistering): Port device team_slave_0 removed [ 196.480171][T11926] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.487313][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.495008][T11926] bridge_slave_0: entered allmulticast mode [ 196.501769][T11926] bridge_slave_0: entered promiscuous mode [ 196.524204][T11979] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1676'. [ 196.533220][T11979] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1676'. [ 196.542994][T11926] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.550090][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.557600][T11926] bridge_slave_1: entered allmulticast mode [ 196.564627][T11926] bridge_slave_1: entered promiscuous mode [ 196.596176][T11926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.609682][T11926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.638073][T11992] openvswitch: netlink: IP tunnel dst address not specified [ 196.651085][T11926] team0: Port device team_slave_0 added [ 196.658240][T11926] team0: Port device team_slave_1 added [ 196.664046][T11954] chnl_net:caif_netlink_parms(): no params data found [ 196.688800][T11926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.695765][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.721787][T11926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.733375][T11926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.740360][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.766949][T11926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.786194][T11915] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 196.795574][T12001] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1684'. [ 196.810061][T11921] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 196.829389][T11915] EXT4-fs error (device loop1): ext4_convert_unwritten_extents:4854: inode #14: comm kworker/u8:29: mark_inode_dirty error [ 196.844927][T11921] EXT4-fs error (device loop1): ext4_convert_unwritten_extents:4854: inode #14: comm kworker/u8:33: mark_inode_dirty error [ 196.846851][T12001] loop2: detected capacity change from 0 to 8192 [ 196.860535][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.867221][T11921] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 196.871208][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.884157][T11915] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 196.900728][T11921] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 196.909946][T11954] bridge_slave_0: entered allmulticast mode [ 196.916236][T11921] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 196.929331][T11954] bridge_slave_0: entered promiscuous mode [ 196.942848][T11921] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 14, error -12) [ 196.946614][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.956947][T11279] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.962660][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.979378][T11954] bridge_slave_1: entered allmulticast mode [ 196.995413][T11954] bridge_slave_1: entered promiscuous mode [ 197.020085][T11926] hsr_slave_0: entered promiscuous mode [ 197.026847][T11926] hsr_slave_1: entered promiscuous mode [ 197.043827][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.075241][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.118986][T11954] team0: Port device team_slave_0 added [ 197.125721][T11954] team0: Port device team_slave_1 added [ 197.160035][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.167067][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.193098][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.210450][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.217435][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.243368][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.257304][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 197.257316][ T29] audit: type=1326 audit(1723379381.150:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.286961][ T29] audit: type=1326 audit(1723379381.150:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83fed99817 code=0x7ffc0000 [ 197.310440][ T29] audit: type=1326 audit(1723379381.150:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.334029][ T29] audit: type=1326 audit(1723379381.150:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.357530][ T29] audit: type=1326 audit(1723379381.150:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.381022][ T29] audit: type=1326 audit(1723379381.150:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.404575][ T29] audit: type=1326 audit(1723379381.150:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.428128][ T29] audit: type=1326 audit(1723379381.150:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.451991][ T29] audit: type=1326 audit(1723379381.150:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.475526][ T29] audit: type=1326 audit(1723379381.160:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.4.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83fed979f9 code=0x7ffc0000 [ 197.512498][T11954] hsr_slave_0: entered promiscuous mode [ 197.519086][T11954] hsr_slave_1: entered promiscuous mode [ 197.525662][T11954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.533850][T11954] Cannot create hsr debugfs directory [ 197.607588][T11926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.666719][T11926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.688809][T12013] chnl_net:caif_netlink_parms(): no params data found [ 197.724109][T12013] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.731198][T12013] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.739524][T12013] bridge_slave_0: entered allmulticast mode [ 197.746614][T12013] bridge_slave_0: entered promiscuous mode [ 197.765202][T11926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.769791][T12037] loop2: detected capacity change from 0 to 512 [ 197.781896][T12013] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.782119][T12037] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.789081][T12013] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.802565][T12037] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 197.803973][T12013] bridge_slave_1: entered allmulticast mode [ 197.811529][T12037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 197.818838][T12013] bridge_slave_1: entered promiscuous mode [ 197.830610][T12037] System zones: 1-12 [ 197.835602][T12037] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1689: corrupted in-inode xattr: e_value size too large [ 197.849945][T12037] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1689: couldn't read orphan inode 15 (err -117) [ 197.862350][T12037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.863185][T11926] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.888136][T10990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.899593][T12013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.914810][T12013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.930543][T12043] loop2: detected capacity change from 0 to 1024 [ 197.937472][T12043] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.949167][T12013] team0: Port device team_slave_0 added [ 197.955558][T12013] team0: Port device team_slave_1 added [ 197.962238][T12043] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1690: Invalid block bitmap block 0 in block_group 0 [ 197.976120][T12043] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1690: Failed to acquire dquot type 0 [ 197.994196][T12043] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.1690: Freeing blocks not in datazone - block = 0, count = 4096 [ 198.008682][T12043] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1690: Invalid inode bitmap blk 0 in block_group 0 [ 198.022436][T12013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.029548][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.034259][T12043] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 198.055898][T12013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.056640][T12013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.066403][T11914] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u8:28: Failed to release dquot type 0 [ 198.074902][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.074927][T12013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.075510][T12043] EXT4-fs (loop2): 1 orphan inode deleted [ 198.089781][T11926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.096075][T12043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.170851][T11926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.181774][T11912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.198369][T10990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.208412][T11926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.222576][T12013] hsr_slave_0: entered promiscuous mode [ 198.228991][T12013] hsr_slave_1: entered promiscuous mode [ 198.235086][T12013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.242703][T12013] Cannot create hsr debugfs directory [ 198.248323][T11926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.251506][T12062] loop2: detected capacity change from 0 to 2048 [ 198.267418][T11912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.278030][T12062] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1695: bad orphan inode 8192 [ 198.294336][T12062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.312518][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 198.322205][T12062] bridge_slave_1: left allmulticast mode [ 198.327924][T12062] bridge_slave_1: left promiscuous mode [ 198.333531][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.342127][T12062] bridge_slave_0: left allmulticast mode [ 198.347792][T12062] bridge_slave_0: left promiscuous mode [ 198.353383][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.405928][T11912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.466943][T10990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.470604][T11926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.490462][T11912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.505273][T11926] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.515558][ T9259] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.522692][ T9259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.537331][ T9259] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.544402][ T9259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.553051][T12068] loop2: detected capacity change from 0 to 8192 [ 198.575333][T11954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.599606][T11954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.609102][T11912] bridge_slave_1: left allmulticast mode [ 198.614818][T11912] bridge_slave_1: left promiscuous mode [ 198.620548][T11912] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.629839][T11912] bridge_slave_0: left allmulticast mode [ 198.635503][T11912] bridge_slave_0: left promiscuous mode [ 198.641215][T11912] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.738737][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.749457][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.760456][T11912] bond0 (unregistering): Released all slaves [ 198.774768][T11954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.786275][T11954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.822258][T11926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.852999][T11954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.870665][T11954] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.890509][T11912] hsr_slave_0: left promiscuous mode [ 198.898915][T12082] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1697'. [ 198.908056][T11912] hsr_slave_1: left promiscuous mode [ 198.913854][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.921459][T11912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.929940][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.937465][T11912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.947779][T11912] veth1_macvtap: left promiscuous mode [ 198.953346][T11912] veth0_macvtap: left promiscuous mode [ 198.958892][T11912] veth1_vlan: left promiscuous mode [ 198.964162][T11912] veth0_vlan: left promiscuous mode [ 199.003415][T12089] Illegal XDP return value 13826 on prog (id 323) dev N/A, expect packet loss! [ 199.052238][T11912] team0 (unregistering): Port device team_slave_1 removed [ 199.063848][T11912] team0 (unregistering): Port device team_slave_0 removed [ 199.109045][T11914] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.116159][T11914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.128497][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.135686][T11915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.155593][T11926] veth0_vlan: entered promiscuous mode [ 199.167776][T11926] veth1_vlan: entered promiscuous mode [ 199.192553][T11926] veth0_macvtap: entered promiscuous mode [ 199.200776][T11926] veth1_macvtap: entered promiscuous mode [ 199.214099][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.224810][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.234739][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.245215][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.255044][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.265447][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.276568][T11926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.284917][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.295419][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.305260][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.315779][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.325601][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.336063][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.346816][T11926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.360764][T11926] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.369939][T11926] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.378751][T11926] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.387509][T11926] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.411268][T11954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.438480][T12013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.456025][T12013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.464922][T12013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.474928][T12103] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1701'. [ 199.484502][T12013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.534102][T11954] veth0_vlan: entered promiscuous mode [ 199.538627][T12103] loop3: detected capacity change from 0 to 8192 [ 199.550613][T11954] veth1_vlan: entered promiscuous mode [ 199.582600][T11954] veth0_macvtap: entered promiscuous mode [ 199.592119][T11954] veth1_macvtap: entered promiscuous mode [ 199.609610][T12013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.618657][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.629135][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.638973][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.649414][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.659250][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.669759][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.679758][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.690241][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.702424][T11954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.719422][T12013] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.728601][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.739139][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.749057][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.759513][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.769409][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.780031][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.789919][T11954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.800369][T11954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.813272][T11954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.820724][T11912] bridge_slave_1: left allmulticast mode [ 199.826472][T11912] bridge_slave_1: left promiscuous mode [ 199.832096][T11912] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.834336][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1703'. [ 199.901316][T11912] bridge_slave_0: left allmulticast mode [ 199.907046][T11912] bridge_slave_0: left promiscuous mode [ 199.912762][T11912] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.107884][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.119175][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.129800][T11912] bond0 (unregistering): Released all slaves [ 200.139267][T11912] bond1 (unregistering): Released all slaves [ 200.153101][T11914] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.160208][T11914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.181470][T11914] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.188623][T11914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.200177][T11954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.208941][T11954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.217806][T11954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.226579][T11954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.260983][T12123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1707'. [ 200.270039][T12123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1707'. [ 200.280179][T12123] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 200.296527][T12123] bond1: entered allmulticast mode [ 200.303209][T12123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.361362][T11912] hsr_slave_0: left promiscuous mode [ 200.373547][T11912] hsr_slave_1: left promiscuous mode [ 200.398472][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.406135][T11912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.426081][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.433569][T11912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.445193][T11912] veth1_macvtap: left promiscuous mode [ 200.450755][T11912] veth0_macvtap: left promiscuous mode [ 200.456400][T11912] veth1_vlan: left promiscuous mode [ 200.461645][T11912] veth0_vlan: left promiscuous mode [ 200.595275][T11912] team0 (unregistering): Port device team_slave_1 removed [ 200.605920][T11912] team0 (unregistering): Port device team_slave_0 removed [ 200.660450][T12144] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1713'. [ 200.669512][T12144] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1713'. [ 200.721858][T12151] loop3: detected capacity change from 0 to 512 [ 200.731096][T12151] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1716: corrupted in-inode xattr: invalid ea_ino [ 200.745882][T12151] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1716: couldn't read orphan inode 15 (err -117) [ 200.766434][T12151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.792295][T12013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.846842][T11926] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.883066][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 200.913163][T12162] loop4: detected capacity change from 0 to 8192 [ 200.967790][T12013] veth0_vlan: entered promiscuous mode [ 200.979110][T12179] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1723'. [ 200.989418][T12013] veth1_vlan: entered promiscuous mode [ 200.991385][T12182] loop2: detected capacity change from 0 to 512 [ 201.012353][T12013] veth0_macvtap: entered promiscuous mode [ 201.028381][T12182] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1725: bg 0: block 393: padding at end of block bitmap is not set [ 201.045793][T12013] veth1_macvtap: entered promiscuous mode [ 201.050543][T12183] loop3: detected capacity change from 0 to 8192 [ 201.062353][T12182] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 201.069961][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.078506][T12179] loop0: detected capacity change from 0 to 8192 [ 201.081471][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.097778][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.108198][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.118029][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.124369][T12182] EXT4-fs (loop2): 2 truncates cleaned up [ 201.128455][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.128469][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.128481][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.132209][T12013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.168635][T12182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.177134][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.194732][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.204547][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.215013][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.224961][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.235493][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.245322][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.255762][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.282049][T12013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.298171][T12013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.307000][T12013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.315681][T12013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.324480][T12013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.343203][T12182] vlan2: entered promiscuous mode [ 201.423512][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1727'. [ 201.434693][T10990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.470779][T12197] dccp_close: ABORT with 48 bytes unread [ 201.507797][T12198] netlink: 'syz.4.1727': attribute type 10 has an invalid length. [ 201.528210][T12198] batman_adv: batadv0: Adding interface: team0 [ 201.534427][T12198] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.559595][T12198] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 201.569417][T12196] loop2: detected capacity change from 0 to 8192 [ 202.013720][T12209] loop0: detected capacity change from 0 to 512 [ 202.022265][T12209] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1732: bg 0: block 393: padding at end of block bitmap is not set [ 202.037800][T12209] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 202.047082][T12209] EXT4-fs (loop0): 2 truncates cleaned up [ 202.053281][T12209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.084984][T12209] vlan2: entered promiscuous mode [ 202.091889][T12209] syz_tun: entered promiscuous mode [ 202.098697][T12209] team0: Port device vlan2 added [ 202.145907][T12212] loop3: detected capacity change from 0 to 8192 [ 202.261507][T11954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.317972][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 202.317985][ T29] audit: type=1326 audit(1723379386.220:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.352266][T12220] loop0: detected capacity change from 0 to 2048 [ 202.359331][ T29] audit: type=1326 audit(1723379386.220:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5293fe9817 code=0x7ffc0000 [ 202.359483][ T29] audit: type=1326 audit(1723379386.220:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.359579][ T29] audit: type=1326 audit(1723379386.220:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.359618][ T29] audit: type=1326 audit(1723379386.220:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.359638][ T29] audit: type=1326 audit(1723379386.220:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.359659][ T29] audit: type=1326 audit(1723379386.220:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.359739][ T29] audit: type=1326 audit(1723379386.220:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.359822][ T29] audit: type=1326 audit(1723379386.220:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.359843][ T29] audit: type=1326 audit(1723379386.220:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5293fe79f9 code=0x7ffc0000 [ 202.390788][T12220] loop0: detected capacity change from 0 to 2048 [ 202.627127][T12220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.683926][T12220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.710501][T12237] loop4: detected capacity change from 0 to 512 [ 202.727969][T12237] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1739: bg 0: block 393: padding at end of block bitmap is not set [ 202.766290][T12237] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 202.790562][T12237] EXT4-fs (loop4): 2 truncates cleaned up [ 202.811801][T12237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.848516][T12237] vlan2: entered promiscuous mode [ 202.921665][T11376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.017566][T12248] loop4: detected capacity change from 0 to 8192 [ 203.154192][T12253] loop2: detected capacity change from 0 to 8192 [ 203.158446][T12255] loop3: detected capacity change from 0 to 8192 [ 203.206174][T12257] loop4: detected capacity change from 0 to 512 [ 203.214974][T12257] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1745: bg 0: block 393: padding at end of block bitmap is not set [ 203.231358][T12257] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 203.240545][T12257] EXT4-fs (loop4): 2 truncates cleaned up [ 203.247767][T12257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.271466][T12257] vlan2: entered promiscuous mode [ 203.276656][T12257] syz_tun: entered promiscuous mode [ 203.283528][T12257] team0: Port device vlan2 added [ 203.320684][T11376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.513365][T12271] netlink: 'syz.3.1746': attribute type 10 has an invalid length. [ 203.555614][T12271] batman_adv: batadv0: Adding interface: team0 [ 203.561917][T12271] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.587121][T12271] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 203.627193][T12242] dccp_close: ABORT with 48 bytes unread [ 203.788758][T12284] loop1: detected capacity change from 0 to 2048 [ 203.852023][T12284] loop1: detected capacity change from 0 to 2048 [ 203.867623][T12284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.893887][T12284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.138005][T12296] loop4: detected capacity change from 0 to 8192 [ 204.219217][T12298] loop1: detected capacity change from 0 to 8192 [ 204.246168][T12298] loop1: p2 p3 p4 [ 204.249980][T12298] loop1: p2 start 452985600 is beyond EOD, truncated [ 204.256853][T12298] loop1: p3 start 4177527808 is beyond EOD, truncated [ 204.263768][T12298] loop1: p4 size 3599499392 extends beyond EOD, truncated [ 204.335146][T12306] loop2: detected capacity change from 0 to 512 [ 204.357178][T12306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1758: bg 0: block 393: padding at end of block bitmap is not set [ 204.398323][T12314] loop3: detected capacity change from 0 to 512 [ 204.414383][T12306] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 204.424350][T12306] EXT4-fs (loop2): 2 truncates cleaned up [ 204.424696][T12314] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 204.444919][T12306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.457529][T12314] EXT4-fs (loop3): Remounting filesystem read-only [ 204.464106][T12314] EXT4-fs (loop3): 1 truncate cleaned up [ 204.473453][T12314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.485775][T12314] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 204.493208][T12314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.525409][T12306] vlan2: entered promiscuous mode [ 204.532245][T12306] syz_tun: entered promiscuous mode [ 204.539109][T12306] team0: Port device vlan2 added [ 204.599725][T10990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.088266][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.095401][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.102782][T12349] bridge0: entered allmulticast mode [ 205.118864][T12347] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.126296][T12347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.133926][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.141216][T12347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.151366][T12347] bridge0: entered promiscuous mode [ 205.194603][T12352] loop4: detected capacity change from 0 to 512 [ 205.201618][T12352] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.209692][T12352] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 205.220469][T12352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 205.229468][T12352] System zones: 1-12 [ 205.233630][T12352] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1770: corrupted in-inode xattr: e_value size too large [ 205.248864][T12352] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1770: couldn't read orphan inode 15 (err -117) [ 205.261294][T12352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.285763][T11376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.411060][T12323] dccp_close: ABORT with 48 bytes unread [ 205.508834][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.533865][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.654988][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.662114][T12363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.674525][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.681652][T12363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.067428][T12438] loop1: detected capacity change from 0 to 512 [ 206.084295][T12438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.106424][T12438] EXT4-fs (loop1): 1 truncate cleaned up [ 206.121964][T12438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.158401][T12454] loop3: detected capacity change from 0 to 1024 [ 206.168974][T12454] EXT4-fs: Ignoring removed orlov option [ 206.178464][T12454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.236986][T11926] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.250083][T12470] __nla_validate_parse: 1 callbacks suppressed [ 206.250095][T12470] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1787'. [ 206.321412][T12484] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.613268][T12013] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.935750][T12581] loop1: detected capacity change from 0 to 2048 [ 206.981344][T12594] loop2: detected capacity change from 0 to 4096 [ 206.996919][T12581] loop1: detected capacity change from 0 to 2048 [ 207.005676][T12594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.024695][T12594] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 207.038723][T12594] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 207.048240][T12594] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 207.060389][T12581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.075574][T12613] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 207.095510][T12581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.164883][T12619] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1804'. [ 207.230217][T12625] dccp_close: ABORT with 48 bytes unread [ 207.253568][T12627] netlink: 'syz.4.1807': attribute type 32 has an invalid length. [ 207.261457][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 207.270514][T12627] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 207.332535][T12633] netlink: 'syz.4.1807': attribute type 66 has an invalid length. [ 207.350416][T10990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.378355][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 207.378368][ T29] audit: type=1326 audit(1723379391.280:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.408589][ T29] audit: type=1326 audit(1723379391.280:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.432356][ T29] audit: type=1326 audit(1723379391.280:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f969fa79817 code=0x7ffc0000 [ 207.455770][ T29] audit: type=1326 audit(1723379391.280:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.455879][ T29] audit: type=1326 audit(1723379391.280:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.455955][ T29] audit: type=1326 audit(1723379391.280:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.455978][ T29] audit: type=1326 audit(1723379391.280:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.456003][ T29] audit: type=1326 audit(1723379391.280:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.456025][ T29] audit: type=1326 audit(1723379391.280:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.456095][ T29] audit: type=1326 audit(1723379391.280:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969fa779f9 code=0x7ffc0000 [ 207.653229][T12645] FAULT_INJECTION: forcing a failure. [ 207.653229][T12645] name failslab, interval 1, probability 0, space 0, times 0 [ 207.665964][T12645] CPU: 1 UID: 0 PID: 12645 Comm: syz.3.1813 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 207.676794][T12645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 207.686877][T12645] Call Trace: [ 207.690205][T12645] [ 207.693131][T12645] dump_stack_lvl+0xf2/0x150 [ 207.693333][T12649] loop1: detected capacity change from 0 to 2048 [ 207.697769][T12645] dump_stack+0x15/0x20 [ 207.708238][T12645] should_fail_ex+0x229/0x230 [ 207.713029][T12645] ? kvasprintf_const+0x5d/0x100 [ 207.718030][T12645] should_failslab+0x8f/0xb0 [ 207.722641][T12645] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 207.729038][T12645] kvasprintf+0x8c/0x110 [ 207.733307][T12645] kvasprintf_const+0x5d/0x100 [ 207.737581][T12649] loop1: detected capacity change from 0 to 2048 [ 207.738141][T12645] kobject_set_name_vargs+0x44/0xe0 [ 207.749643][T12645] dev_set_name+0x84/0xb0 [ 207.753970][T12645] ? hrtimer_init+0x104/0x1f0 [ 207.758667][T12645] ? wakeup_source_sysfs_add+0xf9/0x1a0 [ 207.764205][T12645] ? swiotlb_dev_init+0x19/0x30 [ 207.769045][T12645] ? device_initialize+0x1fe/0x210 [ 207.774264][T12645] wakeup_source_sysfs_add+0x10c/0x1a0 [ 207.779840][T12645] wakeup_source_register+0x106/0x250 [ 207.785262][T12645] ep_insert+0x7da/0xd20 [ 207.789529][T12645] do_epoll_ctl+0x628/0x950 [ 207.794024][T12645] __x64_sys_epoll_ctl+0xc6/0xf0 [ 207.799017][T12645] x64_sys_call+0x27c9/0x2d60 [ 207.803699][T12645] do_syscall_64+0xc9/0x1c0 [ 207.808220][T12645] ? clear_bhb_loop+0x55/0xb0 [ 207.812925][T12645] ? clear_bhb_loop+0x55/0xb0 [ 207.817654][T12645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.823538][T12645] RIP: 0033:0x7f9bb33b79f9 [ 207.827949][T12645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.847644][T12645] RSP: 002b:00007f9bb2037038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 207.856119][T12645] RAX: ffffffffffffffda RBX: 00007f9bb3545f80 RCX: 00007f9bb33b79f9 [ 207.864167][T12645] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 207.872210][T12645] RBP: 00007f9bb2037090 R08: 0000000000000000 R09: 0000000000000000 [ 207.880338][T12645] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 207.888297][T12645] R13: 0000000000000000 R14: 00007f9bb3545f80 R15: 00007ffd9453f8c8 [ 207.896277][T12645] [ 207.915084][T12649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.922996][T12656] loop3: detected capacity change from 0 to 1024 [ 207.937184][T12656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.950706][T12649] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.994734][T12664] bridge0: port 3(ipvlan2) entered blocking state [ 208.001304][T12664] bridge0: port 3(ipvlan2) entered disabled state [ 208.008474][T12656] loop3: detected capacity change from 1024 to 1023 [ 208.025521][T12664] ipvlan2: entered allmulticast mode [ 208.031310][T12664] ipvlan2: left allmulticast mode [ 208.032395][T11926] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /26/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 208.074995][T11926] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.157297][T12013] ================================================================== [ 208.165402][T12013] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 208.173302][T12013] [ 208.175620][T12013] read-write to 0xffff888114e80de8 of 8 bytes by task 12665 on cpu 0: [ 208.183773][T12013] shmem_add_to_page_cache+0x3b9/0x4b0 [ 208.189242][T12013] shmem_get_folio_gfp+0x513/0xd80 [ 208.194354][T12013] shmem_write_begin+0xa0/0x1c0 [ 208.199206][T12013] generic_perform_write+0x1b4/0x580 [ 208.204505][T12013] shmem_file_write_iter+0xc8/0xf0 [ 208.209625][T12013] __kernel_write_iter+0x24f/0x4e0 [ 208.214746][T12013] dump_user_range+0x3a7/0x550 [ 208.219514][T12013] elf_core_dump+0x1aeb/0x1c30 [ 208.224284][T12013] do_coredump+0xfa7/0x1810 [ 208.228790][T12013] get_signal+0xdc1/0x1080 [ 208.233211][T12013] arch_do_signal_or_restart+0x95/0x4b0 [ 208.238757][T12013] irqentry_exit_to_user_mode+0x9a/0x130 [ 208.244392][T12013] irqentry_exit+0x12/0x50 [ 208.248812][T12013] asm_exc_page_fault+0x26/0x30 [ 208.253683][T12013] [ 208.255998][T12013] read to 0xffff888114e80de8 of 8 bytes by task 12013 on cpu 1: [ 208.263622][T12013] shmem_getattr+0x69/0x200 [ 208.264518][T12670] loop4: detected capacity change from 0 to 1024 [ 208.268123][T12013] vfs_getattr+0x19b/0x1e0 [ 208.268145][T12013] vfs_statx+0x134/0x2f0 [ 208.268164][T12013] vfs_fstatat+0xec/0x110 [ 208.287424][T12013] __se_sys_newfstatat+0x58/0x260 [ 208.292459][T12013] __x64_sys_newfstatat+0x55/0x70 [ 208.297488][T12013] x64_sys_call+0x141f/0x2d60 [ 208.302257][T12013] do_syscall_64+0xc9/0x1c0 [ 208.306768][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.312666][T12013] [ 208.314978][T12013] value changed: 0x00000000000008e1 -> 0x00000000000008e4 [ 208.322080][T12013] [ 208.324388][T12013] Reported by Kernel Concurrency Sanitizer on: [ 208.330616][T12013] CPU: 1 UID: 0 PID: 12013 Comm: syz-executor Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 208.341558][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 208.351607][T12013] ================================================================== [ 208.366824][T12670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.390343][T11376] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.440960][ T9259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.509698][ T9259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.590099][ T9259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.669794][ T9259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.730611][ T9259] bridge_slave_1: left allmulticast mode [ 208.736291][ T9259] bridge_slave_1: left promiscuous mode [ 208.741901][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.750509][ T9259] bridge_slave_0: left allmulticast mode [ 208.756215][ T9259] bridge_slave_0: left promiscuous mode [ 208.761894][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.878876][ T9259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.890527][ T9259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.901048][ T9259] bond0 (unregistering): Released all slaves [ 208.989021][ T9259] hsr_slave_0: left promiscuous mode [ 208.995178][ T9259] hsr_slave_1: left promiscuous mode [ 209.001457][ T9259] batman_adv: batadv0: Removing interface: team0 [ 209.008788][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.016297][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.024242][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.031733][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.040974][ T9259] veth1_macvtap: left promiscuous mode [ 209.046467][ T9259] veth0_macvtap: left promiscuous mode [ 209.052022][ T9259] veth1_vlan: left promiscuous mode [ 209.057317][ T9259] veth0_vlan: left promiscuous mode [ 209.157206][ T9259] team0 (unregistering): Port device team_slave_1 removed [ 209.168877][ T9259] team0 (unregistering): Port device team_slave_0 removed