last executing test programs: 13.268108265s ago: executing program 3 (id=355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff}) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r9 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000880)={{r9}, "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"}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) listen(r3, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x500, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macvlan0\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000085) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000780), &(0x7f0000000740)=@tcp6=r3}, 0x90) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 5.414870187s ago: executing program 0 (id=491): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000011c0)={0x2, "069bcbc3252f7071671f7979d1b1c32126bde77d342ae8eded6be5d84110eeaa0d0856d07d99bf06329c253c59c1e09a21c66ae9fcbf74c977b7198d4566930c676b5728a560696aa4893d9347a1fb935a0f419bd3fe05626b3b5cb0fcd158b840f6a8f7cdaded8f7d3a9f56b1d4c87e702d474b4437adb9343cca77c14747bcaebfdec151419cda4b18f9471e9e48eb4f77cdf9b5179bc1947042215220f7ec2435f4b5f6a4ec90a2578013c1494185e622c1fb1ea8dd2012917d61082649f15cbd5fada9ca525d622e5f42638a1cd5a84a0b5bff64217777d271d8d8f19774e63c2b80917c7d88fdc658e8512f231f300cfc1290f2ac14130f59be6b5113213e24a06da2e71aac2ff319f6e685b195225e508680021b1212ae3df67fd076bb9c1aef986b6f21f940d8bb28b84af65fe55101714aa4cfc4b4abcd297e3b3141c6fcf03bdcd4860a48502f1b1545652e974d00da282b5d1228d5e26dbf5a228c6312977d405530a2dbbecb79c9216e3f0484cee82c7b6271cc4370a3c0dea2a0d31515609901109c40dc8f5bcf5e7e706055b2fcee13097cfa5963d5fa5a374d8b3e33d4500e77b7ae37c692f04f95c00cab36f1a0e5200f88b7d3b0bf511885bf23acfc943c275ccb062e73eb7468cfcf2088725afd16900ad81b9e54b21e79cae6aa16ee11f6db7986516cc8c7c36e69d60430ba93d6fb7e38e6323f1dcd31"}) unshare(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f00000000c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f00000008c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@data_err_abort}, {@resuid}, {@norecovery}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@bsdgroups}, {@lazytime}, {@grpquota}, {@quota}]}, 0x1, 0x54f, &(0x7f0000001080)="$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") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x89101a, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000870000/0x1000)=nil, 0x1000, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f000086d000/0x1000)=nil) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r4, r3, 0x0, 0x8000000d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 4.521815001s ago: executing program 0 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000201b14700c1e0ac74f000000001280000000000900"}) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x94, 0x0, 0x0, 0xffffff9b}, {0x25}, {0x6}]}, 0x10) r6 = fcntl$dupfd(r4, 0x0, r5) write$sndseq(r6, 0x0, 0x0) bind$isdn_base(r6, &(0x7f0000000080)={0x22, 0x7f, 0x6, 0x1, 0x7f}, 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000003c00048005000300000000000500030000000000050003000000000005000300000000000500030000000000050003000000000005000300000000003400048005000300000000000500030000000000050003000000000005000300000000000500030000b81d50be10986d000000050003000000000008000200000000000800020003000000240004800500030001000000050003000700000005000300000000000500030000000000080001000000000008000100010000000000020000000000240004800500030000000000325e030000000000050003000000000005000300000000000800020000000000"], 0xfc}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000200)=0xff) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808100240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20902"], 0x10}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000300)="7800000018002507b9409b02ffff48000203be04020406050a08040c5c0009005800d32345653600648d270016000a09000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004070b0015000a0000000000e000e218d1dd3b6ed538640f325000"/120, 0x78, 0x0, 0x0, 0x0) 4.28338588s ago: executing program 0 (id=500): sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x1, 0x4, 0x3}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)="5f2fb8b32c3e0e36c1e8e3fd9e7469d4139823a544f0745b275ef46910f15e4de855545f7b0de32d1a0b19a6c8054f7af3a5d2bdb4700a142952942949933de8ebe74929e22cd121012bac4974ecc4d57c2ce3e3c4c3289ece41745267fa892f5a3341982d74b0e37d3bfb82cb1b", 0x6e}, {&(0x7f0000000480)="9860521bb8fdc53a414e83ca1c7e8a72fe", 0x11}, {&(0x7f00000004c0)="e18dccc648fecc0a3bd38d53bb5c0a869ce38290863b8da186eafcac5a9581384957c9500b709d9e6f46308f584e95f191e36bf42b3e2010ec4a499e823c1aed7fb3536b8d91e7e4eaac5d132df48bda4b7b7c011a2242d7ce0c43d6ed397a7904a9089b4175cc268f09bf77db8fe5ca606e80a287000e12e53f3098e20af1a641b39bf6b8955a628e269becc901c2a51287fe4f540d9cac26f307f5c31ece9b17fb3419c12f404c9420304afeefb015ae1c754a986c120c8e799f66311595571d97", 0xc2}, {&(0x7f00000005c0)="ec8c0f16b49c8c481ed5d91467944c2706f29ea0133a5d20a10964a632a2c22c06eb686af8a49cbae94d035987fb817f8975476181c4b97b0f4394e2ed0e3b8c0bdd3d090b32d84dd2332821c913ec39773470aff791134be1a6ec2af4af8d74a9736eb298b0e46001c759c5d6958af599d502ee2ac1e06316f81af7ab3b1fb14182b309f3f15917c06bde4c82e3c3704d74a01571955c56b046d8056908dd4f3cc05f98984e8aefcfae815398550b77a0b6bf87d1979c8003ce245f7469fe02c8b459df22d8393d754d8ff052c98f6a41d5868ddd34289de42691e021ad4d69", 0xe0}], 0x4}, 0x5) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x7, 0xff, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0xd, 0x3}, 0x1000c0, 0x3, 0x1, 0x7, 0xff, 0x2, 0x1, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x1d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x7, 0x0, 0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008800, &(0x7f0000000080), 0x1, 0x637, &(0x7f0000001200)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000008"], 0x8, 0x0) 3.744210144s ago: executing program 2 (id=508): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x798, &(0x7f0000000100), 0xfe, 0x46a, &(0x7f0000000b40)="$eJzs3E9oHNUfAPDvzGbTX/+mv1qrra1Gqxj8kzRp1R68KAoeFAQ91GNM0lK7baSJYEuRVKSCFyl4F4+C4N2TXkQ9CV71LoWiRWj1FJndmXazzSbZZDcbs58PTPveztt977tv3u6beTsJoGcNZv8kETsi4teIGKhlFxYYrP1368alib9vXJpIYn7+jT+SarmbNy5NFEWL523PM0NpRPpRkley0MyFi2fGK5Wp83l+ZPbsuyMzFy4+ffrs+KmpU1Pnxo4fP3Z09Llnx55pS5xZXDcPfDB9cP8rb119beLE1bd//Cpr775Dtf31cbTLYBb4n/NVjfsea3dlXbazLp30dbEhtKQUEVl3lavjfyBKcafzBuLlD7vaOKCjsu+mLc13z80Dm1gS3W4B0B3FF312/lts9ROAUmenH113/YXaCVAW9618q+3pizQvU+5g/YMRcWLun8+zLTp0HQIAoN632fznqcXmf2nsqyu3K19D2R0R/4+IPRFxT0TsjYh7I6pl74uI+1usv3Fp6O75T3ptVYGtUDb/ez5f21o4/ytmf5GU8tzOavzl5OTpytSR/D0ZivKWLD+6RB3fvfTLp8321c//si2rv5gL5u241tdwgW5yfHa8XZPS65cjDvQtFn9yeyUgiYj9EXGgtZfeVSROP/HlwWaFlo9/CW1YZ5r/IuLxWv/PRUP8hWTp9cmR/0Vl6shIcVTc7aefr7zerP41xd8GWf9vW3D8Ny5VDvyV1K/XzrRex5XfPm56TrPa478/ebO6Zt2fd9T747Oz50cj+pNXq2X687LVx8fuPLfIF+Wz+IcOLz7+9+TPySp4ICKyg/hQRDwYEQ/lbX84Ih6JiMNLxP/Di4++s/r4OyuLf3LRz7/bx//uhf3feqJ05vtvmtW/sv4/Vk0N5Y9UP/+WsdIGruW9AwAAgP+KNCJ2RJIO306n6fBw7Tf8e2NbWpmemX3y5PR75yZr9wjsjnJaXOkaqLseOprM5a9Yy4/l14qL/Ufz68aflbZW88MT05XJLscOvW57k/Gf+X2z//gHyNfRlrgLANi8GtfR0y61A1h/7teG3rX8+O/kLTBAN7X+/X+5I+0A1t9i439rQ95aAGxOzv+hdxn/0LuMf+hdxj/0pLXc1987ia8/qb1bG6U9GyERadtfuXz3AVn8NZINEfLGSJTWp65ufioBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0z78BAAD//9RM6Fg=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001c0000002000018008000100", @ANYRES32=r2, @ANYBLOB="140002006c6f00"/20], 0x34}}, 0x0) open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000933f50000000b7080000000000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7020000f3ffffb01500000086000000952191bdfb891ed5cd2f894362f5469357e1edb728c82302eb230556eb0ba576e60bfc4a836453bddb021d5472f059e9957a7bfff12d8849cb494060e1ec0b3acf64af5f2f0ca1fd6de0770a9576de5128a219704b3581ef465cf9c5e0b551e5e941133dc8e3e1871a"], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffe2b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet6(0xa, 0x6, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r10 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r9, 0x5) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r10, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) bind$qrtr(r5, &(0x7f0000000700)={0x2a, 0x1, 0x4000}, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.516517432s ago: executing program 2 (id=512): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000001f8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60cb763e00000000000000ff02000000000000000000000000000186009078000000000000000000000000010163"], 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r9 = dup(r8) sendmsg$AUDIT_USER(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x17}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000400)={&(0x7f0000000340)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="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", 0x1000}], 0x2}, 0x40805) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="610501fd02030602046b7f06beacfe46fd18176d06801f1f01ad"], 0x1a) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 3.409575282s ago: executing program 2 (id=513): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0xca26a3480f06da14, 0x10, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000fc0)='syzkaller\x00', 0x80, 0x4b, &(0x7f0000001000)=""/75, 0x41100, 0x59, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000010c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001100)=[{0x4, 0x3, 0x4, 0xa}, {0x2, 0x4, 0xf, 0x1}, {0x4, 0x2, 0x0, 0xb}], 0x10, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001200)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) unshare(0x2000400) (rerun: 32) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) listen(r3, 0x0) r4 = fsmount(r2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) write$binfmt_script(r8, &(0x7f0000000e00)={'#! ', './file0', [{0x20, 'data=writeback'}, {0x20, 'GPL\x00'}, {0x20, '&$!.'}], 0xa, "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"}, 0x121) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x29, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800ff01000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000030000000000000000000000181f0000", @ANYRES32=r7, @ANYBLOB="000000000000000020c2030004000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x11, r4, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x80000003, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000006c0)=[r3], &(0x7f0000000cc0)=[{0x4, 0x3, 0xa, 0x9}, {0x2, 0x5, 0x0, 0x7}, {0x1, 0x0, 0xf, 0x4}, {0x4, 0x3, 0x2, 0x4}, {0x1, 0x2, 0xa, 0x1}, {0x1, 0x3, 0x6, 0x4}], 0x10, 0x7}, 0x90) epoll_create1(0x0) umount2(0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000a50000006600000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0xc5, &(0x7f0000000380)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x264a}, 0x80) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") 3.280173662s ago: executing program 2 (id=516): socket$inet6(0xa, 0x0, 0x0) socket(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x7, 0x3, 0x14}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x4, 0x0, 0x0, r0, 0xb3}, 0x48) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000002c0)={[{@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@lazytime}, {@sysvgroups}, {@data_err_abort}, {@user_xattr}]}, 0x1, 0x5e5, &(0x7f0000000800)="$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") socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xfffffffffffffff2, 0x80242) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000380)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp={0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x20, 0x4, 0x6}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x8, 0x0, 0x800}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1068) 2.436059261s ago: executing program 2 (id=519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack_perm, @md5sig={0x13, 0x3c, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x1670e68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, &(0x7f0000000000)='./file0\x00') fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.21197622s ago: executing program 4 (id=525): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000c80)='ext4_update_sb\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x4000800) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}], [], 0x6b}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0xe9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE) io_uring_setup(0xdac, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.731139829s ago: executing program 0 (id=501): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) open(0x0, 0x1193ff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x28011, r3, 0x8ade6000) ftruncate(r3, 0x796c) 1.520147626s ago: executing program 2 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x6, 0x400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000001c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001500010000006eb1000000000a380000", @ANYRES32=0x0, @ANYBLOB="140001"], 0x34}}, 0x0) unshare(0x24020400) ptrace(0x10, 0x1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x19, r3, 0xc, 0x0) r4 = inotify_init1(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r5, 0x6000000) inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0xa2000721) read$usbfs(r5, &(0x7f0000000100)=""/209, 0xd1) syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10780}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioperm(0x0, 0x3, 0x800000800017) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000019000100000000000b00000002000000000000000000000008001e0003000000080016"], 0x44}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}}}, 0x24}}, 0x0) rmdir(0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000740)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00'}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'veth0_to_hsr\x00', 'team0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'wlan1\x00', 'veth0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ah={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 1.290878275s ago: executing program 4 (id=529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = creat(0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) r4 = dup(r2) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r6, &(0x7f0000000380)=ANY=[], 0x4b0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x16f47e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r7, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000002c0)={0x4, 0x5, {0x3, @struct={0x4a, 0x6}, 0x0, 0x0, 0x7, 0x0, 0x6, 0x6, 0x2, @usage=0x5, 0xad, 0x4, [0x5, 0x79b, 0x9, 0x3, 0x7, 0xd]}, {0x1, @struct={0x9e62, 0x7fffffff}, 0x0, 0x3, 0x9, 0x3, 0x7, 0x2, 0x20, @struct={0xf, 0x5}, 0x400, 0x7, [0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff0]}, {0x9, @struct={0x0, 0x8}, 0x0, 0xe, 0x10001, 0x0, 0x7a, 0xffffffffffffa5a3, 0x800, @usage=0x1, 0x6, 0xc, [0xfffffffffffffffe, 0xffffffffffffff7f, 0x4, 0x7, 0x200, 0x3]}, {0x7, 0x1, 0x7}}) 964.632662ms ago: executing program 3 (id=515): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000035000100000000000000000003ffffffe5000000100001800c001000040010", @ANYRES8=0x0, @ANYRES16=r2, @ANYRES64=r3], 0x28}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) (async) open(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000002740)="2b701d37") recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001080)=""/4099, 0x1003}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000100)=""/34, 0x22}], 0x3}}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x89d8acdc520a1335, 0xffffffffffffffff, 0x40, 0x0, 0x0) (async) io_setup(0x4, &(0x7f00000014c0)=0x0) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 912.061196ms ago: executing program 3 (id=530): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2eec}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x9c}}, 0x840) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x80000001) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x8, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000890}, 0x20000004) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340)=0x6, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x240040d4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xffd9d276ca5708ae, 0x337d, 0x8000, 0x2, 0x340, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x60}}, 0x4) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000880)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x87, &(0x7f0000000a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{r5, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)='%-5lx \x00'}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xd, 0x4, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbbd, 0x0, 0x0, 0x0, 0xe}, [@jmp={0x5, 0x1, 0x0, 0x60da7855055b670f, 0xa, 0xc}]}, &(0x7f00000007c0)='GPL\x00', 0xf, 0x7b, &(0x7f0000000800)=""/123, 0x41100, 0x44, '\x00', r8, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xe, 0x1, 0x5}, 0x10, r9, r0, 0x6, &(0x7f0000000d00)=[r5, r5, r0, r0, r10], &(0x7f0000000d40)=[{0x5, 0x1, 0x5, 0x7}, {0x2, 0x5, 0x0, 0xc}, {0x5, 0x2, 0xf, 0x7}, {0x1, 0x1, 0xb, 0xb}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x1, 0xd, 0xc}], 0x10, 0x9}, 0x90) r12 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ppoll(&(0x7f0000000e80)=[{r12, 0x440}, {r10, 0x2002}, {r5, 0x200}, {r7}, {r10, 0x6102}, {r11, 0x2000}], 0x6, &(0x7f0000000ec0), &(0x7f0000000f00)={[0x3]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000f80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000f40), 0x13f, 0x8}}, 0x20) sendto$inet6(r0, &(0x7f0000000fc0)="795c66e93e623560ba84e3663206f866880775d542a206b51ad1fd9c39bba913846b4259f2583d892a7257502d3fa968756e80aaab13d6dc894fb208e065015235469168c24fdc1ebdc480b63a407817af32ccaa1b67ec2e3d275a5f3e79f0197ae7e3b12d286d511f5082f0f32dab62841c", 0x72, 0x4, &(0x7f0000001040)={0xa, 0x4e22, 0x9, @remote, 0x6b}, 0x1c) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001080)={0x7, 0x1, {0x1, @usage=0x7, 0x0, 0x0, 0x7, 0xffffffffffff7a2b, 0xfde, 0x53a, 0x0, @struct={0xd, 0x1c}, 0x6ec, 0x1, [0x6, 0x200, 0xffffffffffffff97, 0x8, 0x7, 0x7]}, {0x10, @usage=0x1, 0x0, 0x40, 0x3, 0x5, 0xdb, 0x8, 0x81, @usage=0x4, 0xffffffff, 0x8, [0xfffffffffffffffd, 0x8000000000000000, 0xffffffffffffff01, 0x0, 0x5, 0x7]}, {0x401, @usage=0x1, 0x0, 0x5, 0x2000000000000000, 0xfa, 0x6, 0x0, 0x9a, @struct={0xe45}, 0xc44, 0x7ff, [0x6, 0x7, 0x8000000000000001, 0x8, 0x100000000, 0x9]}, {0xffffffff, 0x4, 0x6}}) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x32, &(0x7f0000001540)={@mcast2}, 0x14) 911.520156ms ago: executing program 3 (id=531): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [], {0x95, 0x0, 0x74}}, 0x0, 0x8}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x2c}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="200000005f0005c5283d0500000000000000e32ca1727e51d90611b7471c52890a7c90387747b1f2e46a6d32eae362f8c364d22a4b10204cdf5866e852f83b5e5824b1d5b2d043106b6ce3337f1295256be2a5dcaa5657828ac68b4cef03d9bf6470fcfd712776ff3e3455f6901725782d79e2e63641a2fa016084917e263823004b32a9f095cd2169be4a6e53b783777438a2b02b77bac796a26554caa5e90c3f9d4eaf9ce4646d0bff44ab762bd6bc6e8917fc8348fa0bfcd0d873b5b3073ff0aae9dcb5b05fcb440e3e3bc05fbb44a3396fe930d1c85fbe327e7b4e150210d59e2a5155217830e836b5a87271"], 0x20}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000600000004010c00080008000c4004480000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001680)=""/45, 0x2d}], 0x1, 0x0, 0x0) (async) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000600)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b72b543c47c896ce0bce66a245ad99b8183d98cd824498949714ffaac8a6fb6db714e4b94bdae254fa68a0557eb3c5c2683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x10}, @tail_call, @call={0x85, 0x0, 0x0, 0x42b}, @ldst={0x0, 0x2, 0x1, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x25, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x1ff, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x81}, 0x90) mmap$IORING_OFF_CQ_RING(&(0x7f00003cf000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x8000000) (async) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000640), 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x84, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}]}, 0x84}}, 0x0) 909.907136ms ago: executing program 3 (id=532): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x3}, 0x100830, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES64, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYRESDEC=r2], 0x64}}, 0x4004010) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x15, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x26e1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x2, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000600)=[&(0x7f0000000400)={0x0, 0x0, 0x8, 0x0, 0x0, r6, 0x0}]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 687.976274ms ago: executing program 3 (id=534): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r5, 0x6d05, 0x0) splice(r4, 0x0, r3, 0x0, 0x9aa7, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0xd, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x60002, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000feffffff000000000c000000b7080000000000007b8af8ff00000000b7080000feffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000c490ece671f7334c6b6a64287403a59500000000000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x55, &(0x7f0000000240)=""/85, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x6, 0x1, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000600)=[r4, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r9, r10], &(0x7f0000000640)=[{0x1, 0x5, 0xb, 0x4}, {0x1, 0x2, 0xb, 0x1}], 0x10, 0x3}, 0x90) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x0, 0x14, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffef67}}]}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f00000003c0)=""/158, 0x45, 0x9e, 0x1, 0x1ff}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x200, '\x00', 0x0, r11, 0x2, 0x4, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x7, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x104010, &(0x7f0000000380)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r13 = socket$inet6(0xa, 0x0, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000740)=0x1, 0x4) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x6c00, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 676.296155ms ago: executing program 0 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @private2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000540)=""/4096, 0x26, 0x1000, 0xa}, 0x20) setgroups(0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setreuid(0x0, 0xee01) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000002010400000000000000000200000024000280140001800800010000000000080002e1ab1e00010c0002800500010000000000300003802c0001801400030000000000000000000000ffff0000000014000400ff010000000000000000000000000001040001"], 0x6c}}, 0x0) mkdirat(r7, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1f, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 592.159852ms ago: executing program 0 (id=536): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{r0}, r2, 0x8, @unused=[0x3, 0xae58, 0x2], @subvolid=0x5}) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgrp(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r8 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) sendmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}, 0x4041) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r10}, &(0x7f0000bbdffc)) bind$unix(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f00000017c0)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/24, 0x18}, {&(0x7f0000001600)=""/106, 0x6a}, {&(0x7f0000000340)=""/49, 0x31}], 0x4, &(0x7f00000016c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x2100) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 177.700336ms ago: executing program 1 (id=539): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x147}, {&(0x7f0000000fc0)="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", 0x46d}], 0x2}, 0x8400) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000840)="f0", 0x1}], 0x1}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="bfcbf1775504", 0x0, 0x0, 0x0, 0x0, 0x0}) 177.361336ms ago: executing program 1 (id=540): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = socket$xdp(0x2c, 0x3, 0x0) creat(&(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x4000, 0x1000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create1(0x0) epoll_create1(0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x3, 0x1f, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="c9b2e5", &(0x7f0000001c80)=""/4096, 0x0, 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") io_setup(0x3, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x7fff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x8, 0x207, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="6579a7c23bec481f3439424f117c18f407878b4e57b3ec9cdc9f68f950d9d1242045b41437eaee34d7fcc8270766987b15d440dcb5e5cebfc77814a5488372f98d2fa45313bb45c6d0dbd541863943a0e4f45de35fd2103268bd1384f97d04414a8f751dc360cabab764b2c9fccc5549255629d2b06f64682de4a517cd48390c4457c8457cc90787db8f5a863ba196d84b69e3b27b64337048b0661d85d02dbbc17398485e812bdd1cd9015c0415", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x9}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @desc4}, &(0x7f0000000a40)={0x0, "e76324317b35aa52f0a285156814e6ea678d91b20622e69b0567c608f3ec2bb04f26e20b06ef0448d383e1ea50df969065826e2290f5411d2250b0d085bc2fb4"}, 0x48, r6) keyctl$search(0xa, r6, &(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x3}, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 175.361616ms ago: executing program 4 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX=r3], &(0x7f0000000040)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x89, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7ff, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7800, 0x80, 0x1ff, 0x6, {{0x6, 0x4, 0x1, 0x34, 0x18, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x3, 0x3c}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x81, 0x0, 0x0, 0x1332, r5, 0x10001, '\x00', r6, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xe}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x48000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r9, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x80044584, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000300000085000000860000009551f83a1de22f60959a5c31a854d091011dff79a9fac4ab1bc89e5e0b5db452b6170c3d06cb10dd605640af72c71873a9b9fa5bb0aa2f80b541b9958263130c9d591fd6199f68579a8c478f24b10400000000000000aafea49914c15a5c2d7d5857985ebdef9d585d8d999067e4952caa42ebaa963c5817e0d0ec846165f81d79769d10d1516a20918e4ea144452ad842e500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000540)=r4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='objagg_obj_get\x00', r10}, 0x10) truncate(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) socket(0x10, 0x3, 0x0) getpgrp(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 116.384451ms ago: executing program 4 (id=542): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0xfffffffd, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r0) 115.702511ms ago: executing program 4 (id=543): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4100) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @buffer={0x17, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcff}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c535bb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x4f66, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x368}, 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0xba3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)) 114.884911ms ago: executing program 1 (id=544): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x45, 0x0, 0x0, 0x800007}, {0x6}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, 0x0, &(0x7f0000000640)=r4}, 0x20) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') read$char_usb(r5, &(0x7f0000000140)=""/189, 0xfffffecd) read$msr(r5, &(0x7f0000000080)=""/25, 0x19) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10004}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="94010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb000000000000000b0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) r10 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r10, 0x10d, 0xf4, 0x0, &(0x7f0000000080)) 111.187651ms ago: executing program 4 (id=545): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) open(0x0, 0x1193ff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x28011, r3, 0x8ade6000) ftruncate(r3, 0x796c) 98.707522ms ago: executing program 1 (id=546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "0000eb00"}, 0x38) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES16=r0, @ANYBLOB="ffffffff000000000000000000000000000000003200000000000000000000000000ffffe0000002000000ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003481000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES64=r0, @ANYRES8=r1], 0x144}, 0x1, 0x0, 0x0, 0x40400}, 0x4880) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x87003, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000a40)='./bus\x00', 0x2c4202, 0x65) sendfile(r4, r3, 0x0, 0x100801700) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200010a0000000000000000800000000c0004000000000000000000"], 0x20}}, 0x0) getsockopt(r5, 0x15, 0x7, &(0x7f00000010c0)=""/4096, &(0x7f0000000180)=0x1000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r6 = dup(r2) sendmmsg$inet(r6, &(0x7f0000001040)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000040)="02ba", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="981f", 0x2}], 0x1}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x440100, 0x0) sendfile(r1, r7, &(0x7f0000000200), 0x5) 20.171669ms ago: executing program 1 (id=547): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000002"], 0x14}}, 0x0) r2 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@norecovery}, {@nombcache}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x576, &(0x7f0000010340)="$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") inotify_init() setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='schedstat\x00') preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000200)=""/86, 0x56}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x80, 0x8000, 0x9, 0x6, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp={0x44, 0x10, 0x14, 0x0, 0x0, [0x80000000, 0x4, 0x87c]}, @lsrr={0x83, 0xb, 0xfc, [@empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp_prespec={0x44, 0x24, 0xf8, 0x3, 0x1, [{@empty}, {@multicast1}, {@multicast1, 0xf3}, {@multicast1, 0x4c}]}, @timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x5, [{@rand_addr=0x64010102, 0x5}, {@local, 0x5ac}]}]}}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="01070000000000000000200000"], 0x1c}, 0x1, 0x0, 0x0, 0x44847}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) sendfile(r8, r9, 0x0, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000008c0)={0x2e, @rand_addr=0x64010101, 0x4e21, 0x1, 'wrr\x00', 0x4, 0x0, 0x58}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 1 (id=548): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a0001000000000000800000810080000000000000000000140002"], 0x30}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6d3bae49259a935b480ee610800f5c5b35943bdb14ae21509b259f5eaf5f3a71155845156bf64809dee25c0eadad25cac50b01aabdb713c8c9965a19e114c8bbc35054f68bf889f1a6ed430aff1952b2498efc46cbaebc815cb2ea2ff01000067d49ffb192dad5fcac955fee31e59228679db51d72e0ba6bd6fa2545df05482e63a", 0x9b}], 0x5}}], 0x1, 0x0) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async, rerun: 32) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x10) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 64) socketpair(0x1a, 0x802, 0x4, &(0x7f0000000000)) (rerun: 64) kernel console output (not intermixed with test programs): ][ T2787] loop2: p111 start 8388612 is beyond EOD, truncated [ 30.532677][ T2787] loop2: p112 size 32937 extends beyond EOD, truncated [ 30.532977][ T2787] loop2: p113 start 4177526784 is beyond EOD, truncated [ 30.533041][ T2787] loop2: p114 start 8388612 is beyond EOD, truncated [ 30.533053][ T2787] loop2: p115 size 32937 extends beyond EOD, truncated [ 30.533398][ T2787] loop2: p116 start 4177526784 is beyond EOD, truncated [ 30.533411][ T2787] loop2: p117 start 8388612 is beyond EOD, truncated [ 30.533425][ T2787] loop2: p118 size 32937 extends beyond EOD, truncated [ 30.533878][ T2787] loop2: p119 start 4177526784 is beyond EOD, truncated [ 30.533894][ T2787] loop2: p120 start 8388612 is beyond EOD, truncated [ 30.533908][ T2787] loop2: p121 size 32937 extends beyond EOD, truncated [ 30.534263][ T2787] loop2: p122 start 4177526784 is beyond EOD, truncated [ 30.534280][ T2787] loop2: p123 start 8388612 is beyond EOD, truncated [ 30.534295][ T2787] loop2: p124 size 32937 extends beyond EOD, truncated [ 30.534680][ T2787] loop2: p125 start 4177526784 is beyond EOD, truncated [ 30.534702][ T2787] loop2: p126 start 8388612 is beyond EOD, truncated [ 30.534717][ T2787] loop2: p127 size 32937 extends beyond EOD, truncated [ 30.535118][ T2787] loop2: p128 start 4177526784 is beyond EOD, truncated [ 30.535131][ T2787] loop2: p129 start 8388612 is beyond EOD, truncated [ 30.535142][ T2787] loop2: p130 size 32937 extends beyond EOD, truncated [ 30.535401][ T2787] loop2: p131 start 4177526784 is beyond EOD, truncated [ 30.535471][ T2787] loop2: p132 start 8388612 is beyond EOD, truncated [ 30.535482][ T2787] loop2: p133 size 32937 extends beyond EOD, truncated [ 30.535824][ T2787] loop2: p134 start 4177526784 is beyond EOD, truncated [ 30.535840][ T2787] loop2: p135 start 8388612 is beyond EOD, truncated [ 30.535855][ T2787] loop2: p136 size 32937 extends beyond EOD, truncated [ 30.536210][ T2787] loop2: p137 start 4177526784 is beyond EOD, truncated [ 30.536222][ T2787] loop2: p138 start 8388612 is beyond EOD, truncated [ 30.536233][ T2787] loop2: p139 size 32937 extends beyond EOD, truncated [ 30.536653][ T2787] loop2: p140 start 4177526784 is beyond EOD, truncated [ 30.536702][ T2787] loop2: p141 start 8388612 is beyond EOD, truncated [ 30.536715][ T2787] loop2: p142 size 32937 extends beyond EOD, truncated [ 30.537001][ T2787] loop2: p143 start 4177526784 is beyond EOD, truncated [ 30.537045][ T2787] loop2: p144 start 8388612 is beyond EOD, truncated [ 30.537056][ T2787] loop2: p145 size 32937 extends beyond EOD, truncated [ 30.537586][ T2787] loop2: p146 start 4177526784 is beyond EOD, truncated [ 30.537599][ T2787] loop2: p147 start 8388612 is beyond EOD, truncated [ 30.537610][ T2787] loop2: p148 size 32937 extends beyond EOD, truncated [ 30.538052][ T2787] loop2: p149 start 4177526784 is beyond EOD, truncated [ 30.538067][ T2787] loop2: p150 start 8388612 is beyond EOD, truncated [ 30.538081][ T2787] loop2: p151 size 32937 extends beyond EOD, truncated [ 30.538416][ T2787] loop2: p152 start 4177526784 is beyond EOD, truncated [ 30.538428][ T2787] loop2: p153 start 8388612 is beyond EOD, truncated [ 30.538441][ T2787] loop2: p154 size 32937 extends beyond EOD, truncated [ 30.538696][ T2787] loop2: p155 start 4177526784 is beyond EOD, truncated [ 30.538759][ T2787] loop2: p156 start 8388612 is beyond EOD, truncated [ 30.538772][ T2787] loop2: p157 size 32937 extends beyond EOD, truncated [ 30.539229][ T2787] loop2: p158 start 4177526784 is beyond EOD, truncated [ 30.539242][ T2787] loop2: p159 start 8388612 is beyond EOD, truncated [ 30.539253][ T2787] loop2: p160 size 32937 extends beyond EOD, truncated [ 30.539630][ T2787] loop2: p161 start 4177526784 is beyond EOD, truncated [ 30.539644][ T2787] loop2: p162 start 8388612 is beyond EOD, truncated [ 30.539656][ T2787] loop2: p163 size 32937 extends beyond EOD, truncated [ 30.539948][ T2787] loop2: p164 start 4177526784 is beyond EOD, truncated [ 30.539998][ T2787] loop2: p165 start 8388612 is beyond EOD, truncated [ 30.540010][ T2787] loop2: p166 size 32937 extends beyond EOD, truncated [ 30.540292][ T2787] loop2: p167 start 4177526784 is beyond EOD, truncated [ 30.540308][ T2787] loop2: p168 start 8388612 is beyond EOD, truncated [ 30.540324][ T2787] loop2: p169 size 32937 extends beyond EOD, truncated [ 30.540655][ T2787] loop2: p170 start 4177526784 is beyond EOD, truncated [ 30.540667][ T2787] loop2: p171 start 8388612 is beyond EOD, truncated [ 30.540706][ T2787] loop2: p172 size 32937 extends beyond EOD, truncated [ 30.541024][ T2787] loop2: p173 start 4177526784 is beyond EOD, truncated [ 30.541097][ T2787] loop2: p174 start 8388612 is beyond EOD, truncated [ 30.541112][ T2787] loop2: p175 size 32937 extends beyond EOD, truncated [ 30.541497][ T2787] loop2: p176 start 4177526784 is beyond EOD, truncated [ 30.541510][ T2787] loop2: p177 start 8388612 is beyond EOD, truncated [ 30.541596][ T2787] loop2: p178 size 32937 extends beyond EOD, truncated [ 30.541967][ T2787] loop2: p179 start 4177526784 is beyond EOD, truncated [ 30.541982][ T2787] loop2: p180 start 8388612 is beyond EOD, truncated [ 30.542052][ T2787] loop2: p181 size 32937 extends beyond EOD, truncated [ 30.542382][ T2787] loop2: p182 start 4177526784 is beyond EOD, truncated [ 30.542395][ T2787] loop2: p183 start 8388612 is beyond EOD, truncated [ 30.542416][ T2787] loop2: p184 size 32937 extends beyond EOD, truncated [ 30.542682][ T2787] loop2: p185 start 4177526784 is beyond EOD, truncated [ 30.542697][ T2787] loop2: p186 start 8388612 is beyond EOD, truncated [ 30.542752][ T2787] loop2: p187 size 32937 extends beyond EOD, truncated [ 30.543095][ T2787] loop2: p188 start 4177526784 is beyond EOD, truncated [ 30.543110][ T2787] loop2: p189 start 8388612 is beyond EOD, truncated [ 30.543122][ T2787] loop2: p190 size 32937 extends beyond EOD, truncated [ 30.543521][ T2787] loop2: p191 start 4177526784 is beyond EOD, truncated [ 30.543533][ T2787] loop2: p192 start 8388612 is beyond EOD, truncated [ 30.543545][ T2787] loop2: p193 size 32937 extends beyond EOD, truncated [ 30.543902][ T2787] loop2: p194 start 4177526784 is beyond EOD, truncated [ 30.543985][ T2787] loop2: p195 start 8388612 is beyond EOD, truncated [ 30.543998][ T2787] loop2: p196 size 32937 extends beyond EOD, truncated [ 30.544591][ T2787] loop2: p197 start 4177526784 is beyond EOD, truncated [ 30.544614][ T2787] loop2: p198 start 8388612 is beyond EOD, truncated [ 30.544642][ T2787] loop2: p199 size 32937 extends beyond EOD, truncated [ 30.544992][ T2787] loop2: p200 start 4177526784 is beyond EOD, truncated [ 30.545007][ T2787] loop2: p201 start 8388612 is beyond EOD, truncated [ 30.545021][ T2787] loop2: p202 size 32937 extends beyond EOD, truncated [ 30.545457][ T2787] loop2: p203 start 4177526784 is beyond EOD, truncated [ 30.545470][ T2787] loop2: p204 start 8388612 is beyond EOD, truncated [ 30.545483][ T2787] loop2: p205 size 32937 extends beyond EOD, truncated [ 30.545695][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.545911][ T2787] loop2: p206 start 4177526784 is beyond EOD, truncated [ 30.545932][ T2787] loop2: p207 start 8388612 is beyond EOD, truncated [ 30.545946][ T2787] loop2: p208 size 32937 extends beyond EOD, truncated [ 30.546542][ T2787] loop2: p209 start 4177526784 is beyond EOD, truncated [ 30.546557][ T2787] loop2: p210 start 8388612 is beyond EOD, truncated [ 30.546571][ T2787] loop2: p211 size 32937 extends beyond EOD, truncated [ 30.546966][ T2787] loop2: p212 start 4177526784 is beyond EOD, truncated [ 30.546981][ T2787] loop2: p213 start 8388612 is beyond EOD, truncated [ 30.546995][ T2787] loop2: p214 size 32937 extends beyond EOD, truncated [ 30.547478][ T2787] loop2: p215 start 4177526784 is beyond EOD, truncated [ 30.547493][ T2787] loop2: p216 start 8388612 is beyond EOD, truncated [ 30.547507][ T2787] loop2: p217 size 32937 extends beyond EOD, truncated [ 30.547804][ T2787] loop2: p218 start 4177526784 is beyond EOD, truncated [ 30.547818][ T2787] loop2: p219 start 8388612 is beyond EOD, truncated [ 30.547832][ T2787] loop2: p220 size 32937 extends beyond EOD, truncated [ 30.548238][ T2787] loop2: p221 start 4177526784 is beyond EOD, truncated [ 30.548253][ T2787] loop2: p222 start 8388612 is beyond EOD, truncated [ 30.548327][ T2787] loop2: p223 size 32937 extends beyond EOD, truncated [ 30.548664][ T2787] loop2: p224 start 4177526784 is beyond EOD, truncated [ 30.548680][ T2787] loop2: p225 start 8388612 is beyond EOD, truncated [ 30.548694][ T2787] loop2: p226 size 32937 extends beyond EOD, truncated [ 30.549174][ T2787] loop2: p227 start 4177526784 is beyond EOD, truncated [ 30.549191][ T2787] loop2: p228 start 8388612 is beyond EOD, truncated [ 30.549205][ T2787] loop2: p229 size 32937 extends beyond EOD, truncated [ 30.549559][ T2787] loop2: p230 start 4177526784 is beyond EOD, truncated [ 30.549572][ T2787] loop2: p231 start 8388612 is beyond EOD, truncated [ 30.549583][ T2787] loop2: p232 size 32937 extends beyond EOD, truncated [ 30.550025][ T2787] loop2: p233 start 4177526784 is beyond EOD, truncated [ 30.550041][ T2787] loop2: p234 start 8388612 is beyond EOD, truncated [ 30.550079][ T2787] loop2: p235 size 32937 extends beyond EOD, truncated [ 30.550550][ T2787] loop2: p236 start 4177526784 is beyond EOD, truncated [ 30.550576][ T2787] loop2: p237 start 8388612 is beyond EOD, truncated [ 30.550590][ T2787] loop2: p238 size 32937 extends beyond EOD, truncated [ 30.551057][ T2787] loop2: p239 start 4177526784 is beyond EOD, [ 30.997499][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888113478000: rx timeout, send abort [ 30.998049][ T2787] truncated [ 31.004638][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888113478200: rx timeout, send abort [ 31.004870][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888113478000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 31.004917][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888113478200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 32.119747][ T2787] loop2: p240 start 8388612 is beyond EOD, truncated [ 32.126717][ T2787] loop2: p241 size 32937 extends beyond EOD, truncated [ 32.131500][ T2787] loop2: p242 start 4177526784 is beyond EOD, truncated [ 32.141041][ T2787] loop2: p243 start 8388612 is beyond EOD, truncated [ 32.141058][ T2787] loop2: p244 size 32937 extends beyond EOD, truncated [ 32.141481][ T2787] loop2: p245 start 4177526784 is beyond EOD, truncated [ 32.141497][ T2787] loop2: p246 start 8388612 is beyond EOD, truncated [ 32.141511][ T2787] loop2: p247 size 32937 extends beyond EOD, truncated [ 32.141812][ T2787] loop2: p248 start 4177526784 is beyond EOD, truncated [ 32.141825][ T2787] loop2: p249 start 8388612 is beyond EOD, truncated [ 32.141836][ T2787] loop2: p250 size 32937 extends beyond EOD, truncated [ 32.142279][ T2787] loop2: p251 start 4177526784 is beyond EOD, truncated [ 32.142323][ T2787] loop2: p252 start 8388612 is beyond EOD, truncated [ 32.142334][ T2787] loop2: p253 size 32937 extends beyond EOD, truncated [ 32.142363][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 32.142373][ T29] audit: type=1326 audit(1721737376.017:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.142713][ T2787] loop2: p254 start 4177526784 is beyond EOD, truncated [ 32.142729][ T2787] loop2: p255 start 8388612 is beyond EOD, truncated [ 32.142719][ T29] audit: type=1326 audit(1721737376.017:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.142837][ T29] audit: type=1326 audit(1721737376.017:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.142857][ T29] audit: type=1326 audit(1721737376.017:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.144018][ T29] audit: type=1326 audit(1721737376.017:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.144038][ T29] audit: type=1326 audit(1721737376.017:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.144056][ T29] audit: type=1326 audit(1721737376.017:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.144095][ T29] audit: type=1326 audit(1721737376.017:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.144149][ T29] audit: type=1326 audit(1721737376.017:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.144184][ T29] audit: type=1326 audit(1721737376.017:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x7ffc0000 [ 32.214444][ T3463] loop4: detected capacity change from 0 to 1024 [ 32.230935][ T3463] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 32.230958][ T3463] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 32.231223][ T3463] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 32.242606][ T3463] EXT4-fs error (device loop4): ext4_get_journal_inode:5740: inode #5: comm syz.4.60: unexpected bad inode w/o EXT4_IGET_BAD [ 32.244509][ T3463] EXT4-fs (loop4): no journal found [ 32.244521][ T3463] EXT4-fs (loop4): can't get journal size [ 32.254892][ T3463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.269176][ T3467] loop1: detected capacity change from 0 to 512 [ 32.374546][ T3094] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz-executor: invalid block [ 32.591602][ T3467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.645331][ T3094] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz-executor: invalid block [ 32.657283][ T3467] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.689210][ T3479] udevd[3479]: inotify_add_watch(7, /dev/loop2p28, 10) failed: No such file or directory [ 32.707085][ T3480] udevd[3480]: inotify_add_watch(7, /dev/loop2p31, 10) failed: No such file or directory [ 32.720976][ T3477] udevd[3477]: inotify_add_watch(7, /dev/loop2p22, 10) failed: No such file or directory [ 32.735588][ T3478] udevd[3478]: inotify_add_watch(7, /dev/loop2p25, 10) failed: No such file or directory [ 32.747308][ T3476] udevd[3476]: inotify_add_watch(7, /dev/loop2p19, 10) failed: No such file or directory [ 32.775191][ T3481] udevd[3481]: inotify_add_watch(7, /dev/loop2p34, 10) failed: No such file or directory [ 32.790847][ T3475] udevd[3475]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 32.802290][ T3474] udevd[3474]: inotify_add_watch(7, /dev/loop2p13, 10) failed: No such file or directory [ 32.817388][ T3076] udevd[3076]: inotify_add_watch(7, /dev/loop2p10, 10) failed: No such file or directory [ 32.963344][ T3492] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.61: Directory hole found for htree leaf block 0 [ 33.017816][ T3338] udevd[3338]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 33.171003][ T3492] syz.1.61 (3492) used greatest stack depth: 10432 bytes left [ 33.179344][ T3084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.315128][ T3512] loop3: detected capacity change from 0 to 128 [ 33.337487][ T3512] vfat: Unknown parameter './file0' [ 33.410913][ T3517] loop1: detected capacity change from 0 to 512 [ 33.554508][ T3517] ======================================================= [ 33.554508][ T3517] WARNING: The mand mount option has been deprecated and [ 33.554508][ T3517] and is ignored by this kernel. Remove the mand [ 33.554508][ T3517] option from the mount to silence this warning. [ 33.554508][ T3517] ======================================================= [ 33.665020][ T3094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.681819][ T3517] EXT4-fs: Ignoring removed oldalloc option [ 33.692063][ T3517] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 33.700013][ T3517] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c11c, mo2=0002] [ 33.710242][ T3517] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 33.719793][ T3517] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 33.730456][ T3517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.774507][ T3517] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 33.815952][ T3084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.846925][ T3539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.907895][ T3539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.923126][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 33.951559][ T3561] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 33.959182][ T3561] netlink: 'syz.1.76': attribute type 2 has an invalid length. [ 33.974836][ T3539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.995380][ T3564] macvlan0: entered promiscuous mode [ 34.001488][ T3564] ipvlan0: entered promiscuous mode [ 34.007268][ T3564] ipvlan0: left promiscuous mode [ 34.012388][ T3564] macvlan0: left promiscuous mode [ 34.023399][ T3539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.069131][ T3545] chnl_net:caif_netlink_parms(): no params data found [ 34.131668][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.138875][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.151715][ T3545] bridge_slave_0: entered allmulticast mode [ 34.169309][ T3545] bridge_slave_0: entered promiscuous mode [ 34.196368][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.203452][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.220776][ T3545] bridge_slave_1: entered allmulticast mode [ 34.230927][ T3545] bridge_slave_1: entered promiscuous mode [ 34.238486][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 34.262138][ T3578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.81'. [ 34.292550][ T3578] netlink: 66 bytes leftover after parsing attributes in process `syz.1.81'. [ 34.306843][ T3539] bridge_slave_1: left allmulticast mode [ 34.312542][ T3539] bridge_slave_1: left promiscuous mode [ 34.318207][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.336467][ T3539] bridge_slave_0: left allmulticast mode [ 34.342110][ T3539] bridge_slave_0: left promiscuous mode [ 34.347819][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.487599][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.497862][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.511360][ T3539] bond0 (unregistering): Released all slaves [ 34.520852][ T3545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.531452][ T3545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.562397][ T3622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 34.576585][ T3545] team0: Port device team_slave_0 added [ 34.592057][ T3545] team0: Port device team_slave_1 added [ 34.640411][ T3539] hsr_slave_0: left promiscuous mode [ 34.646239][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888103e36c00: rx timeout, send abort [ 34.654545][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888113006c00: rx timeout, send abort [ 34.662991][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888103e36c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.677410][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888113006c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.699595][ T3633] loop1: detected capacity change from 0 to 512 [ 34.700160][ T3629] loop2: detected capacity change from 0 to 512 [ 34.707992][ T3633] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.725306][ T3633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.734384][ T3629] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.88: casefold flag without casefold feature [ 34.748933][ T3539] hsr_slave_1: left promiscuous mode [ 34.754714][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.762274][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.769489][ T3629] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.88: couldn't read orphan inode 15 (err -117) [ 34.770909][ T3633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 34.781492][ T3629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.790455][ T3633] System zones: 1-12 [ 34.807388][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.814800][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.815155][ T3633] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.835322][ T3633] EXT4-fs (loop1): 1 truncate cleaned up [ 34.841324][ T3633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.841740][ T3539] veth1_macvtap: left promiscuous mode [ 34.859308][ T3539] veth0_macvtap: left promiscuous mode [ 34.864823][ T3539] veth1_vlan: left promiscuous mode [ 34.870027][ T3539] veth0_vlan: left promiscuous mode [ 34.876618][ T3084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.904900][ T3629] support for cryptoloop has been removed. Use dm-crypt instead. [ 34.937503][ T3648] loop0: detected capacity change from 0 to 512 [ 34.976643][ T3648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.009526][ T3648] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.049102][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 35.067273][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 35.130418][ T3626] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 35.140982][ T3626] batman_adv: batadv0: Adding interface: team0 [ 35.147176][ T3626] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.172320][ T3626] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 35.183415][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.190487][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.216530][ T3545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.228229][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.235205][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.261128][ T3545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.278362][ T3634] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 35.286096][ T3634] netlink: 2 bytes leftover after parsing attributes in process `syz.3.86'. [ 35.296303][ T3634] team0: entered promiscuous mode [ 35.301342][ T3634] team_slave_0: entered promiscuous mode [ 35.307123][ T3634] team_slave_1: entered promiscuous mode [ 35.314155][ T3634] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.322125][ T3634] batman_adv: batadv0: Interface activated: team0 [ 35.328588][ T3634] batman_adv: batadv0: Interface deactivated: team0 [ 35.335266][ T3634] batman_adv: batadv0: Removing interface: team0 [ 35.342888][ T3634] bridge0: port 3(team0) entered blocking state [ 35.349204][ T3634] bridge0: port 3(team0) entered disabled state [ 35.355690][ T3634] team0: entered allmulticast mode [ 35.360840][ T3634] team_slave_0: entered allmulticast mode [ 35.366576][ T3634] team_slave_1: entered allmulticast mode [ 35.373567][ T3634] bridge0: port 3(team0) entered blocking state [ 35.379848][ T3634] bridge0: port 3(team0) entered forwarding state [ 35.396258][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.435265][ T3545] hsr_slave_0: entered promiscuous mode [ 35.441255][ T3545] hsr_slave_1: entered promiscuous mode [ 35.447438][ T3545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.455398][ T3545] Cannot create hsr debugfs directory [ 35.463534][ T3677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 35.476598][ T3677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 35.488076][ T3677] bridge0: port 3(team0) entered disabled state [ 35.501255][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.510821][ T3677] team0: Cannot enslave team device to itself [ 35.532318][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 35.543621][ T3677] geneve2: entered promiscuous mode [ 35.548894][ T3677] geneve2: entered allmulticast mode [ 35.583977][ T3686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3686 comm=syz.0.98 [ 35.925183][ T3715] loop0: detected capacity change from 0 to 1024 [ 35.931729][ T3715] EXT4-fs: Ignoring removed oldalloc option [ 35.937845][ T3715] EXT4-fs: Ignoring removed i_version option [ 35.943824][ T3715] EXT4-fs: Ignoring removed orlov option [ 35.955310][ T3715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.143632][ T3748] netlink: 'syz.1.103': attribute type 8 has an invalid length. [ 36.167951][ T3545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.179568][ T3545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.192357][ T3758] loop1: detected capacity change from 0 to 512 [ 36.201159][ T3545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.225130][ T3545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.235227][ T3761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.106'. [ 36.307016][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.313537][ T3769] loop1: detected capacity change from 0 to 1024 [ 36.332735][ T3545] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.355501][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.362613][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.393175][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.400255][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.411418][ T3769] loop1: detected capacity change from 0 to 1024 [ 36.436092][ T3769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.505884][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.519782][ T3538] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 36.566036][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.589656][ T3538] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 36.602035][ T3538] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.602035][ T3538] [ 36.611784][ T3538] EXT4-fs (loop1): Total free blocks count 0 [ 36.617830][ T3538] EXT4-fs (loop1): Free/Dirty block details [ 36.623769][ T3538] EXT4-fs (loop1): free_blocks=68451041280 [ 36.629648][ T3538] EXT4-fs (loop1): dirty_blocks=16 [ 36.634830][ T3538] EXT4-fs (loop1): Block reservation details [ 36.640790][ T3538] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 36.653388][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888112816800: rx timeout, send abort [ 36.661693][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888112816600: rx timeout, send abort [ 36.670079][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888112816800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 36.684439][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888112816600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 36.705386][ T3084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.903064][ T3845] syz_tun: default FDB implementation only supports local addresses [ 36.965333][ T3545] veth0_vlan: entered promiscuous mode [ 36.982110][ T3545] veth1_vlan: entered promiscuous mode [ 37.016043][ T3545] veth0_macvtap: entered promiscuous mode [ 37.030543][ T3545] veth1_macvtap: entered promiscuous mode [ 37.046777][ T3860] tipc: Started in network mode [ 37.051647][ T3860] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 37.062547][ T3860] tipc: Enabled bearer , priority 10 [ 37.073255][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.083762][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.093572][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.104047][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.113848][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.124363][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.134146][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.144618][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.201799][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.245660][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.256100][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.265939][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.267523][ T3880] loop0: detected capacity change from 0 to 512 [ 37.276352][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.276362][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.276375][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.312820][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.323372][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.335983][ T3880] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.341237][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.354999][ T3880] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.121: invalid indirect mapped block 512 (level 0) [ 37.368427][ T3880] EXT4-fs (loop0): Remounting filesystem read-only [ 37.375453][ T3880] EXT4-fs (loop0): 1 orphan inode deleted [ 37.381172][ T3880] EXT4-fs (loop0): 1 truncate cleaned up [ 37.389309][ T3880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.403374][ T3545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.412698][ T3545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.421502][ T3545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.430272][ T3545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.441752][ T3880] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 37.448780][ T3880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.538380][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 37.538393][ T29] audit: type=1400 audit(1721737381.407:666): avc: denied { write } for pid=3879 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 37.646426][ T29] audit: type=1400 audit(1721737381.437:667): avc: denied { mount } for pid=3545 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.671371][ T3912] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 37.679054][ T3912] netlink: 'syz.0.124': attribute type 2 has an invalid length. [ 37.715536][ T29] audit: type=1326 audit(1721737381.577:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3919 comm="syz.1.126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4735d5f19 code=0x0 [ 37.747983][ T3912] loop0: detected capacity change from 0 to 512 [ 37.799337][ T3912] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 37.818313][ T3912] EXT4-fs (loop0): 1 truncate cleaned up [ 37.827977][ T29] audit: type=1400 audit(1721737381.617:669): avc: denied { create } for pid=3911 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.835605][ T3912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.848071][ T29] audit: type=1400 audit(1721737381.617:670): avc: denied { write } for pid=3911 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.880482][ T29] audit: type=1326 audit(1721737381.637:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 37.904006][ T29] audit: type=1326 audit(1721737381.637:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 37.927336][ T29] audit: type=1326 audit(1721737381.637:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 37.951256][ T29] audit: type=1326 audit(1721737381.637:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 37.974506][ T29] audit: type=1326 audit(1721737381.637:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 38.174395][ T972] tipc: Node number set to 4269801488 [ 38.187928][ T3972] loop4: detected capacity change from 0 to 512 [ 38.195660][ T3972] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.202407][ T3972] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 38.213640][ T3972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 38.221934][ T3972] System zones: 1-12 [ 38.227643][ T3972] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.133: corrupted in-inode xattr: e_value size too large [ 38.228905][ T3977] sg_write: process 63 (syz.2.134) changed security contexts after opening file descriptor, this is not allowed. [ 38.241887][ T3972] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.133: couldn't read orphan inode 15 (err -117) [ 38.267093][ T3972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.314016][ T3985] loop2: detected capacity change from 0 to 1024 [ 38.316939][ C0] eth0: bad gso: type: 1, size: 1408 [ 38.328878][ T3545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.335763][ T3985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.358892][ T3989] loop4: detected capacity change from 0 to 256 [ 38.371105][ T3989] FAT-fs (loop4): Directory bread(block 64) failed [ 38.378032][ T3989] FAT-fs (loop4): Directory bread(block 65) failed [ 38.384757][ T3989] FAT-fs (loop4): Directory bread(block 66) failed [ 38.391367][ T3989] FAT-fs (loop4): Directory bread(block 67) failed [ 38.394377][ C0] hrtimer: interrupt took 37333 ns [ 38.398166][ T3989] FAT-fs (loop4): Directory bread(block 68) failed [ 38.409677][ T3989] FAT-fs (loop4): Directory bread(block 69) failed [ 38.416183][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888113122a00: rx timeout, send abort [ 38.416239][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888113123e00: rx timeout, send abort [ 38.424527][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888113122a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.424584][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888113123e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.462411][ T3989] FAT-fs (loop4): Directory bread(block 70) failed [ 38.468984][ T3989] FAT-fs (loop4): Directory bread(block 71) failed [ 38.475597][ T3989] FAT-fs (loop4): Directory bread(block 72) failed [ 38.482148][ T3989] FAT-fs (loop4): Directory bread(block 73) failed [ 38.498686][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.534800][ T3539] kworker/u8:18: attempt to access beyond end of device [ 38.534800][ T3539] loop4: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 38.548852][ T3919] dccp_close: ABORT with 1612 bytes unread [ 38.563248][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.611766][ T4011] capability: warning: `syz.4.142' uses deprecated v2 capabilities in a way that may be insecure [ 38.669412][ T4019] loop1: detected capacity change from 0 to 512 [ 38.684816][ T4019] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.692311][ T4019] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 38.715536][ T4019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 38.715541][ T4022] loop3: detected capacity change from 0 to 512 [ 38.715563][ T4019] System zones: 1-12 [ 38.795361][ T4019] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.145: corrupted in-inode xattr: e_value size too large [ 38.797531][ T4026] loop2: detected capacity change from 0 to 512 [ 38.815836][ T4026] EXT4-fs: Ignoring removed i_version option [ 38.821846][ T4026] EXT4-fs: Ignoring removed nobh option [ 38.835165][ T4026] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.843225][ T4019] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.145: couldn't read orphan inode 15 (err -117) [ 38.864012][ T4026] EXT4-fs (loop2): 1 truncate cleaned up [ 38.870175][ T4026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.877578][ T4019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.032688][ T4042] netlink: 'syz.4.149': attribute type 15 has an invalid length. [ 39.074148][ T3084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.098325][ T4049] loop3: detected capacity change from 0 to 2048 [ 39.157915][ T4049] Alternate GPT is invalid, using primary GPT. [ 39.164257][ T4049] loop3: p1 p2 p3 [ 39.228903][ T4073] loop1: detected capacity change from 0 to 128 [ 39.250496][ T4078] netlink: 'syz.3.160': attribute type 3 has an invalid length. [ 39.264981][ T4059] __nla_validate_parse: 5 callbacks suppressed [ 39.264993][ T4059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 39.317497][ T4086] loop1: detected capacity change from 0 to 512 [ 39.339960][ T4086] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.362167][ T4086] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 39.376101][ T4086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 39.384230][ T4086] System zones: 1-12 [ 39.395632][ T4086] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.162: corrupted in-inode xattr: e_value size too large [ 39.421011][ T4086] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.162: couldn't read orphan inode 15 (err -117) [ 39.455221][ T4086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.581894][ T4021] syz.2.146 (4021) used greatest stack depth: 10296 bytes left [ 39.600897][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.708981][ T4143] loop2: detected capacity change from 0 to 512 [ 39.726995][ T4143] EXT4-fs: Ignoring removed nobh option [ 39.737051][ T4149] loop4: detected capacity change from 0 to 512 [ 39.760600][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.778129][ T4156] loop0: detected capacity change from 0 to 512 [ 39.784622][ T4156] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.791493][ T4143] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.802168][ T3084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.811210][ T4156] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 39.825082][ T4162] loop4: detected capacity change from 0 to 2048 [ 39.831547][ T4156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 39.852633][ T4156] System zones: 1-12 [ 39.857600][ T4156] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.173: corrupted in-inode xattr: e_value size too large [ 39.858087][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.872718][ T4162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.883082][ T4156] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.173: couldn't read orphan inode 15 (err -117) [ 39.920304][ T4156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.949989][ T4192] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.175: bg 0: block 234: padding at end of block bitmap is not set [ 39.980463][ T4192] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 32 with error 28 [ 39.992743][ T4192] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.992743][ T4192] [ 39.993740][ T4196] loop3: detected capacity change from 0 to 1024 [ 40.002367][ T4192] EXT4-fs (loop4): Total free blocks count 0 [ 40.002382][ T4192] EXT4-fs (loop4): Free/Dirty block details [ 40.012350][ T3539] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 40.014681][ T4192] EXT4-fs (loop4): free_blocks=0 [ 40.014694][ T4192] EXT4-fs (loop4): dirty_blocks=2576 [ 40.014705][ T4192] EXT4-fs (loop4): Block reservation details [ 40.014714][ T4192] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 40.027184][ T4196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.043933][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 40.062864][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.067543][ T4197] tc_dump_action: action bad kind [ 40.094446][ T4203] loop2: detected capacity change from 0 to 512 [ 40.124178][ T4192] syz.4.175 (4192) used greatest stack depth: 10192 bytes left [ 40.138567][ T4203] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 40.146536][ T4203] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 40.159280][ T4203] System zones: 0-1, 15-15, 18-18, 34-34 [ 40.166284][ T4203] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.172744][ T4203] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 40.187334][ T4203] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 40.195303][ T4203] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.180: bg 0: block 40: padding at end of block bitmap is not set [ 40.214547][ T4203] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 40.235733][ T4203] EXT4-fs (loop2): 1 truncate cleaned up [ 40.240284][ T3085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.241756][ T4203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.264574][ T4237] loop0: detected capacity change from 0 to 2048 [ 40.288942][ T4203] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 40.296911][ T4203] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 40.299119][ T4250] syz.4.184 uses obsolete (PF_INET,SOCK_PACKET) [ 40.321914][ T4237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.416404][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 40.441198][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.492835][ T4301] loop4: detected capacity change from 0 to 1024 [ 40.500485][ T4301] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.519378][ T4301] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.528791][ T4301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.533160][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 40.556026][ T4301] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.186: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.570278][ T4301] EXT4-fs (loop4): 1 orphan inode deleted [ 40.578069][ T4365] netlink: 56 bytes leftover after parsing attributes in process `syz.2.187'. [ 40.578158][ T4301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.606991][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.614026][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.621212][ T4248] bridge_slave_0: entered allmulticast mode [ 40.627515][ T4248] bridge_slave_0: entered promiscuous mode [ 40.633626][ T3545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.634463][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.649766][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.656964][ T4248] bridge_slave_1: entered allmulticast mode [ 40.663478][ T4248] bridge_slave_1: entered promiscuous mode [ 40.673295][ T1530] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.708227][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.721130][ T1530] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.735866][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.777200][ T1530] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.800492][ T4248] team0: Port device team_slave_0 added [ 40.807058][ T4248] team0: Port device team_slave_1 added [ 40.826646][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.833600][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.859646][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.870928][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.877920][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.903820][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.920220][ T1530] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.958306][ T4248] hsr_slave_0: entered promiscuous mode [ 40.964927][ T4248] hsr_slave_1: entered promiscuous mode [ 40.970770][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.978622][ T4248] Cannot create hsr debugfs directory [ 41.019490][ T1530] bridge_slave_1: left allmulticast mode [ 41.025161][ T1530] bridge_slave_1: left promiscuous mode [ 41.030870][ T1530] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.033696][ T4610] syz.1.192 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.049373][ T1530] bridge_slave_0: left allmulticast mode [ 41.055097][ T1530] bridge_slave_0: left promiscuous mode [ 41.060777][ T1530] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.091791][ T4616] loop1: detected capacity change from 0 to 512 [ 41.101206][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.115061][ T4616] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.122969][ T4616] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 41.136785][ T4616] System zones: 0-1, 15-15, 18-18, 34-34 [ 41.147382][ T4616] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.163063][ T4616] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.177601][ T4616] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 41.186106][ T4616] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.194: bg 0: block 40: padding at end of block bitmap is not set [ 41.200692][ T4616] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 41.211093][ T4616] EXT4-fs (loop1): 1 truncate cleaned up [ 41.219788][ T1530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.229617][ T4616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.244516][ T1530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.253076][ T4616] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.261029][ T4616] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 41.270782][ T1530] bond0 (unregistering): Released all slaves [ 41.301980][ T4626] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 41.311517][ T4626] geneve1: entered promiscuous mode [ 41.326720][ T4626] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 41.332666][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 41.350851][ T1530] tipc: Disabling bearer [ 41.356204][ T1530] tipc: Left network mode [ 41.402265][ T3084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.413916][ T1530] hsr_slave_0: left promiscuous mode [ 41.429449][ T1530] hsr_slave_1: left promiscuous mode [ 41.449129][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.456572][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.474215][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.477437][ T4691] loop2: detected capacity change from 0 to 512 [ 41.481640][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.518129][ T1530] veth1_macvtap: left promiscuous mode [ 41.523615][ T1530] veth0_macvtap: left promiscuous mode [ 41.529222][ T1530] veth1_vlan: left promiscuous mode [ 41.534535][ T1530] veth0_vlan: left promiscuous mode [ 41.631984][ T4727] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 41.681669][ T1530] team_slave_1 (unregistering): left promiscuous mode [ 41.688482][ T1530] team_slave_1 (unregistering): left allmulticast mode [ 41.697566][ T1530] team0 (unregistering): Port device team_slave_1 removed [ 41.706951][ T1530] team_slave_0 (unregistering): left promiscuous mode [ 41.713717][ T1530] team_slave_0 (unregistering): left allmulticast mode [ 41.721333][ T1530] team0 (unregistering): Port device team_slave_0 removed [ 41.819078][ T4749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'. [ 41.878282][ T4789] loop4: detected capacity change from 0 to 1024 [ 41.903373][ T4789] ext4: Unknown parameter ' ' [ 41.943464][ T4804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 41.998092][ T4820] loop1: detected capacity change from 0 to 512 [ 42.024880][ T4820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.036702][ T4820] EXT4-fs: journaled quota format not specified [ 42.043063][ T4248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.058984][ T4248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.072300][ T4815] loop0: detected capacity change from 0 to 8192 [ 42.074552][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 42.088376][ T4848] loop1: detected capacity change from 0 to 512 [ 42.103247][ T4248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.112800][ T4848] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 42.125534][ T4248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.133222][ T4848] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 42.143467][ T4848] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.218: bg 0: block 18: invalid block bitmap [ 42.161404][ T4848] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 42.191312][ T4848] EXT4-fs (loop1): 1 truncate cleaned up [ 42.192154][ T4815] loop0: detected capacity change from 0 to 2048 [ 42.198605][ T4848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.223747][ T4848] ext2 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.239884][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.256225][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.265436][ T4848] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 3: comm syz.1.218: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.286308][ T4848] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 3: comm syz.1.218: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.291440][ T4815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.313810][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.320891][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.331522][ T4874] loop4: detected capacity change from 0 to 2048 [ 42.352249][ T4815] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.369037][ T3474] printk: udevd: 160 output lines suppressed due to ratelimiting [ 42.369073][ T4815] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 42.386363][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.389067][ T4815] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.389067][ T4815] [ 42.395998][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.412899][ T4815] EXT4-fs (loop0): Total free blocks count 0 [ 42.418883][ T4815] EXT4-fs (loop0): Free/Dirty block details [ 42.424807][ T4815] EXT4-fs (loop0): free_blocks=2415919104 [ 42.430515][ T4815] EXT4-fs (loop0): dirty_blocks=32 [ 42.435636][ T4815] EXT4-fs (loop0): Block reservation details [ 42.440772][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.441594][ T4815] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 42.490912][ T4901] loop2: detected capacity change from 0 to 256 [ 42.498998][ T4248] veth0_vlan: entered promiscuous mode [ 42.506964][ T4248] veth1_vlan: entered promiscuous mode [ 42.521477][ T4248] veth0_macvtap: entered promiscuous mode [ 42.529065][ T4248] veth1_macvtap: entered promiscuous mode [ 42.541507][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.552000][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.561905][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.572525][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.582463][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.592900][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.602716][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.613178][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.627941][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.643663][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.654117][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.663988][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.674473][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.684440][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.695009][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.704970][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.715454][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.727920][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.738595][ T4248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.747409][ T4248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.756177][ T4248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.764967][ T4248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.797256][ T4815] syz.0.215 (4815) used greatest stack depth: 9672 bytes left [ 42.864576][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.888156][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 42.888169][ T29] audit: type=1400 audit(1721737386.757:937): avc: denied { create } for pid=4910 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.914150][ T29] audit: type=1400 audit(1721737386.757:938): avc: denied { setopt } for pid=4910 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.940529][ T3084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.961939][ T4923] loop1: detected capacity change from 0 to 512 [ 42.968903][ T4923] EXT4-fs: Ignoring removed oldalloc option [ 42.972761][ T4928] loop3: detected capacity change from 0 to 1024 [ 42.981747][ T4923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.995128][ T4924] loop1: detected capacity change from 0 to 764 [ 43.001438][ T4924] iso9660: Unknown parameter 'ext3' [ 43.038315][ T4939] loop3: detected capacity change from 0 to 256 [ 43.045751][ T29] audit: type=1400 audit(1721737386.917:939): avc: denied { mounton } for pid=4938 comm="syz.3.230" path="/2/file0/bus" dev="ramfs" ino=7903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 43.049389][ T4941] loop0: detected capacity change from 0 to 1024 [ 43.074293][ T4939] FAT-fs (loop3): Directory bread(block 64) failed [ 43.081016][ T4939] FAT-fs (loop3): Directory bread(block 65) failed [ 43.089033][ T4939] FAT-fs (loop3): Directory bread(block 66) failed [ 43.095920][ T4939] FAT-fs (loop3): Directory bread(block 67) failed [ 43.102424][ T4939] FAT-fs (loop3): Directory bread(block 68) failed [ 43.108967][ T4939] FAT-fs (loop3): Directory bread(block 69) failed [ 43.115636][ T4939] FAT-fs (loop3): Directory bread(block 70) failed [ 43.122217][ T4939] FAT-fs (loop3): Directory bread(block 71) failed [ 43.129683][ T4939] FAT-fs (loop3): Directory bread(block 72) failed [ 43.137237][ T4939] FAT-fs (loop3): Directory bread(block 73) failed [ 43.151844][ T4939] netlink: 36 bytes leftover after parsing attributes in process `syz.3.230'. [ 43.160752][ T4939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'. [ 43.182418][ T29] audit: type=1400 audit(1721737387.047:940): avc: denied { ioctl } for pid=4953 comm="syz.0.233" path="socket:[7916]" dev="sockfs" ino=7916 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.207663][ T29] audit: type=1326 audit(1721737387.047:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x0 [ 43.255962][ T29] audit: type=1326 audit(1721737387.127:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4956 comm="syz.1.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4735d5f19 code=0x0 [ 43.256444][ T4965] loop3: detected capacity change from 0 to 512 [ 43.286099][ T4965] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.297602][ T4965] EXT4-fs (loop3): 1 orphan inode deleted [ 43.303413][ T4965] EXT4-fs (loop3): 1 truncate cleaned up [ 43.309417][ T4965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.325880][ T4965] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #12: block 7: comm syz.3.236: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 43.346331][ T4965] EXT4-fs (loop3): Remounting filesystem read-only [ 43.362442][ T4248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.422550][ T29] audit: type=1400 audit(1721737387.287:943): avc: denied { ioctl } for pid=5008 comm="syz.3.238" path="socket:[7952]" dev="sockfs" ino=7952 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.464044][ T5011] loop3: detected capacity change from 0 to 512 [ 43.526914][ T5012] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.534891][ T5012] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 43.564846][ T5011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.583887][ T5011] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.599890][ T29] audit: type=1400 audit(1721737387.467:944): avc: denied { getopt } for pid=5010 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.608962][ C1] vcan0: j1939_tp_rxtimer: 0xffff888112ffdc00: rx timeout, send abort [ 43.627453][ C1] vcan0: j1939_tp_rxtimer: 0xffff888112ffde00: rx timeout, send abort [ 43.635856][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888112ffdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 43.650129][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888112ffde00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 43.701658][ T29] audit: type=1400 audit(1721737387.567:945): avc: denied { execute } for pid=5020 comm="syz.2.240" path="/36/cpu.stat" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.758102][ T4248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.777390][ T29] audit: type=1400 audit(1721737387.627:946): avc: denied { write } for pid=5025 comm="syz.2.241" name="001" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.928491][ T5045] team0: entered promiscuous mode [ 43.933568][ T5045] team_slave_0: entered promiscuous mode [ 43.939375][ T5045] team_slave_1: entered promiscuous mode [ 43.948536][ T5045] tipc: Enabling of bearer rejected, failed to enable media [ 43.974777][ T5044] team0: left promiscuous mode [ 43.979562][ T5044] team_slave_0: left promiscuous mode [ 43.985077][ T5044] team_slave_1: left promiscuous mode [ 44.031527][ T5057] loop0: detected capacity change from 0 to 2048 [ 44.032003][ T5059] loop3: detected capacity change from 0 to 1024 [ 44.050757][ T5059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.073680][ T4248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.092444][ C0] eth0: bad gso: type: 1, size: 1408 [ 44.224119][ T5089] loop1: detected capacity change from 0 to 128 [ 44.232167][ T5090] 9pnet_fd: Insufficient options for proto=fd [ 44.239458][ T5089] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 44.324151][ T5101] loop4: detected capacity change from 0 to 1024 [ 44.332546][ T5101] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 44.332546][ T5101] [ 44.335587][ T5083] loop0: detected capacity change from 0 to 128 [ 44.343247][ T5101] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 44.618424][ T5122] __nla_validate_parse: 6 callbacks suppressed [ 44.618453][ T5122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.260'. [ 44.647337][ C0] eth0: bad gso: type: 1, size: 1408 [ 44.652813][ C0] eth0: bad gso: type: 1, size: 1408 [ 44.658852][ C0] eth0: bad gso: type: 1, size: 1408 [ 44.666644][ T5126] loop2: detected capacity change from 0 to 128 [ 44.684666][ T5127] syz.2.262: attempt to access beyond end of device [ 44.684666][ T5127] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 44.871579][ T5150] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 44.871579][ T5150] The task syz.2.266 (5150) triggered the difference, watch for misbehavior. [ 45.335418][ T5164] xt_TCPMSS: Only works on TCP SYN packets [ 45.355373][ T5169] loop0: detected capacity change from 0 to 1024 [ 45.363905][ T5169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.635438][ T5177] loop2: detected capacity change from 0 to 1024 [ 45.642075][ T5177] ext4: Unknown parameter 'dont_hash' [ 45.660554][ T5184] loop2: detected capacity change from 0 to 1024 [ 45.668965][ T5184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.760272][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.800550][ T5217] loop2: detected capacity change from 0 to 128 [ 45.808521][ T5217] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.820754][ T5217] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.892147][ T3090] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.910071][ T5222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.277'. [ 46.020414][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 46.199219][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.285610][ T5241] loop0: detected capacity change from 0 to 1024 [ 46.295723][ T5241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.906510][ T5247] loop2: detected capacity change from 0 to 512 [ 46.915739][ T5247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.928609][ T5247] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.947082][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.015156][ T5253] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 47.022609][ T5253] vhci_hcd: invalid port number 23 [ 47.038600][ T5256] random: crng reseeded on system resumption [ 47.088729][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.106636][ T5256] loop2: detected capacity change from 0 to 128 [ 47.142572][ T5272] loop0: detected capacity change from 0 to 512 [ 47.149810][ T5277] netlink: 52 bytes leftover after parsing attributes in process `syz.3.291'. [ 47.194900][ T5298] 9pnet_fd: Insufficient options for proto=fd [ 47.213392][ T5301] loop0: detected capacity change from 0 to 128 [ 47.220757][ T5301] ext2: Unknown parameter 'measure' [ 47.360765][ T5329] loop4: detected capacity change from 0 to 2048 [ 47.604183][ T5364] loop0: detected capacity change from 0 to 512 [ 47.610916][ T5364] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.622374][ T5364] EXT4-fs (loop0): 1 truncate cleaned up [ 47.628474][ T5364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.680642][ T3088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.986043][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 47.986057][ T29] audit: type=1400 audit(1721737391.857:1048): avc: denied { bind } for pid=5376 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.012528][ T29] audit: type=1400 audit(1721737391.857:1049): avc: denied { setopt } for pid=5376 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.034031][ T29] audit: type=1404 audit(1721737391.887:1050): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 48.049056][ T29] audit: type=1404 audit(1721737391.897:1051): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 48.065436][ T29] audit: type=1400 audit(1721737391.907:1052): avc: denied { read write } for pid=3090 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.089693][ T29] audit: type=1400 audit(1721737391.907:1053): avc: denied { open } for pid=3090 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.113835][ T29] audit: type=1400 audit(1721737391.907:1054): avc: denied { ioctl } for pid=3090 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.139400][ T29] audit: type=1400 audit(1721737391.917:1055): avc: denied { prog_load } for pid=5385 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.158388][ T29] audit: type=1400 audit(1721737391.917:1056): avc: denied { bpf } for pid=5385 comm="syz.2.310" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.178861][ T29] audit: type=1326 audit(1721737391.937:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5385 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 48.336953][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.344159][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.407171][ T5408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.316'. [ 48.416675][ T5408] netlink: 132 bytes leftover after parsing attributes in process `syz.4.316'. [ 48.430459][ T5409] all: renamed from lo (while UP) [ 48.549146][ T5417] netlink: 5 bytes leftover after parsing attributes in process `syz.4.319'. [ 48.598131][ T5449] loop4: detected capacity change from 0 to 128 [ 48.605754][ T5449] ext2: Unknown parameter 'measure' [ 48.641602][ T5458] loop4: detected capacity change from 0 to 128 [ 48.649517][ T5458] ext4: Unknown parameter 'fowner<00000000000000000000' [ 48.671976][ T5458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.323'. [ 48.703844][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 48.721553][ T5464] netlink: 25 bytes leftover after parsing attributes in process `syz.4.325'. [ 48.789398][ T5464] loop4: detected capacity change from 0 to 512 [ 48.833899][ T5464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.864978][ T5464] EXT4-fs (loop4): 1 truncate cleaned up [ 48.871152][ T5464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.894730][ T3545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.983139][ T5489] Cannot find set identified by id 0 to match [ 49.000751][ T5507] loop0: detected capacity change from 0 to 128 [ 49.008237][ T5507] ext2: Unknown parameter 'measure' [ 49.044725][ T5519] loop0: detected capacity change from 0 to 256 [ 49.051469][ T5519] vfat: Bad value for 'fmask' [ 49.052704][ T5521] loop4: detected capacity change from 0 to 128 [ 49.064167][ T5521] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.064968][ T5519] loop0: detected capacity change from 0 to 1764 [ 49.077252][ T5521] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.082707][ T5519] iso9660: Bad value for 'gid' [ 49.119346][ T5519] iso9660: Bad value for 'gid' [ 49.132999][ T3163] kernel write not supported for file bpf-prog (pid: 3163 comm: kworker/1:3) [ 49.167341][ T5519] loop0: detected capacity change from 0 to 8192 [ 49.204676][ T5519] loop0: p2 p3 p4 [ 49.208443][ T5519] loop0: p2 start 452985600 is beyond EOD, truncated [ 49.215207][ T5519] loop0: p3 start 4177527808 is beyond EOD, truncated [ 49.221963][ T5519] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 49.260444][ T5539] loop0: detected capacity change from 0 to 256 [ 49.267835][ T5539] msdos: Unknown parameter 'ÿ0x000000000000ee00' [ 49.364768][ T5554] loop4: detected capacity change from 0 to 128 [ 49.374007][ T5554] ebt_among: dst integrity fail: 301 [ 49.472378][ T5570] loop0: detected capacity change from 0 to 128 [ 49.479959][ T5570] ext2: Unknown parameter 'measure' [ 49.507250][ T5577] loop0: detected capacity change from 0 to 1024 [ 49.549054][ T5577] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 49.566318][ T3161] IPVS: starting estimator thread 0... [ 49.658160][ T5588] IPVS: using max 2928 ests per chain, 146400 per kthread [ 49.802682][ C0] eth0: bad gso: type: 1, size: 1408 [ 49.824994][ T5675] __nla_validate_parse: 2 callbacks suppressed [ 49.825006][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 50.231900][ T5699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5699 comm=syz.0.367 [ 50.336564][ T5716] loop0: detected capacity change from 0 to 128 [ 50.435146][ T5731] loop0: detected capacity change from 0 to 2048 [ 50.446123][ T5731] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.474619][ T5738] loop0: detected capacity change from 0 to 512 [ 50.481155][ T5738] EXT4-fs: Ignoring removed i_version option [ 50.489270][ T5738] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.375: casefold flag without casefold feature [ 50.502090][ T5738] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.375: couldn't read orphan inode 15 (err -117) [ 50.520225][ T5738] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.375: Directory hole found for htree leaf block 0 [ 50.534297][ T5738] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.375: Directory hole found for htree leaf block 0 [ 50.548063][ T5738] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.375: Directory hole found for htree leaf block 0 [ 50.575926][ T5766] loop2: detected capacity change from 0 to 128 [ 50.583669][ T5766] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.671728][ T5779] loop2: detected capacity change from 0 to 256 [ 50.809539][ T5799] tipc: Started in network mode [ 50.814498][ T5799] tipc: Node identity ffffffffffff242, cluster identity 4711 [ 50.821949][ T5799] tipc: Enabling of bearer rejected, failed to enable media [ 50.868658][ T5802] loop2: detected capacity change from 0 to 2048 [ 50.887304][ T5802] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.929629][ T5814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5814 comm=syz.4.389 [ 50.945009][ T5814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5814 comm=syz.4.389 [ 50.957901][ T5814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5814 comm=syz.4.389 [ 50.972709][ T5814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5814 comm=syz.4.389 [ 50.985630][ T5814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5814 comm=syz.4.389 [ 50.998444][ T5814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5814 comm=syz.4.389 [ 51.147256][ T5837] loop2: detected capacity change from 0 to 1024 [ 51.153940][ T5837] EXT4-fs: Ignoring removed i_version option [ 51.160012][ T5837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.168060][ T5837] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 51.177724][ T5837] EXT4-fs (loop2): group descriptors corrupted! [ 51.191628][ T5837] loop2: detected capacity change from 0 to 1024 [ 51.204317][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 51.235374][ T5851] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20001 [ 51.895331][ T5864] x_tables: duplicate underflow at hook 2 [ 51.911440][ T5871] nfs: Bad value for 'source' [ 51.916505][ T5870] nfs: Bad value for 'source' [ 51.922032][ T5869] loop4: detected capacity change from 0 to 2048 [ 51.928621][ T5869] nfs: Unknown parameter 'dioread_nolock' [ 51.986112][ T5890] loop0: detected capacity change from 0 to 128 [ 51.995651][ T5890] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.022187][ T5890] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none. [ 52.033069][ T5890] raw_sendmsg: syz.0.405 forgot to set AF_INET. Fix it! [ 52.057953][ T5903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.408'. [ 52.062355][ T5902] loop0: detected capacity change from 0 to 2048 [ 52.073691][ T5902] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 52.083457][ T5902] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.096260][ T5902] EXT4-fs (loop0): failed to initialize system zone (-117) [ 52.103492][ T5902] EXT4-fs (loop0): mount failed [ 52.111509][ T5902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=5902 comm=syz.0.407 [ 52.112233][ T5904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 52.149607][ T5913] loop2: detected capacity change from 0 to 764 [ 52.163233][ T5913] rock: directory entry would overflow storage [ 52.169426][ T5913] rock: sig=0x4f50, size=4, remaining=3 [ 52.174990][ T5913] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.416398][ T5927] loop2: detected capacity change from 0 to 512 [ 52.423489][ T5927] EXT4-fs: Mount option(s) incompatible with ext2 [ 52.555925][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.415'. [ 52.743467][ C0] eth0: bad gso: type: 1, size: 1408 [ 52.793616][ T5944] netlink: 'syz.2.418': attribute type 2 has an invalid length. [ 52.801325][ T5944] netlink: 'syz.2.418': attribute type 4 has an invalid length. [ 52.808970][ T5944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.418'. [ 52.923224][ T5955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=5955 comm=syz.4.422 [ 52.965942][ T5986] cgroup2: Unknown parameter 'fowner>00000000000000060929' [ 53.035382][ T5991] loop4: detected capacity change from 0 to 2048 [ 53.051845][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 53.051869][ T29] audit: type=1400 audit(1721737396.917:1634): avc: denied { getopt } for pid=5990 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.097000][ T5997] loop4: detected capacity change from 0 to 2048 [ 53.156448][ T5997] loop4: unable to read partition table [ 53.162098][ T5997] loop4: partition table beyond EOD, truncated [ 53.168332][ T5997] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 53.176899][ T3540] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.184533][ T3540] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.199104][ T29] audit: type=1400 audit(1721737397.067:1635): avc: denied { mount } for pid=5996 comm="syz.4.425" name="/" dev="ramfs" ino=10090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.225310][ T3153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.227592][ T29] audit: type=1400 audit(1721737397.067:1636): avc: denied { mounton } for pid=5996 comm="syz.4.425" path="/70/file0/file0" dev="ramfs" ino=10094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 53.255449][ T29] audit: type=1400 audit(1721737397.067:1637): avc: denied { unmount } for pid=3545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.319039][ T6007] loop4: detected capacity change from 0 to 512 [ 53.325848][ T6007] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.332679][ T6007] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 53.342709][ T6007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 53.351719][ T6007] System zones: 1-12 [ 53.355834][ T6007] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.428: corrupted in-inode xattr: e_value size too large [ 53.370894][ T6007] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.428: couldn't read orphan inode 15 (err -117) [ 53.584752][ T29] audit: type=1400 audit(1721737397.457:1638): avc: denied { write } for pid=5998 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.681098][ T6017] loop0: detected capacity change from 0 to 512 [ 53.685380][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.704861][ T6017] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.715689][ T6017] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 53.734634][ T6017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 53.742592][ T6017] System zones: 1-12 [ 53.756971][ T6017] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.430: corrupted in-inode xattr: e_value size too large [ 53.787821][ T6017] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.430: couldn't read orphan inode 15 (err -117) [ 53.886704][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.941398][ T29] audit: type=1326 audit(1721737397.807:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.0.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0463ee5f19 code=0x0 [ 54.043777][ T6025] loop0: detected capacity change from 0 to 256 [ 54.051735][ T6025] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.092328][ T29] audit: type=1400 audit(1721737397.957:1640): avc: denied { create } for pid=6030 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.113550][ T6031] netlink: 256 bytes leftover after parsing attributes in process `syz.2.432'. [ 54.122551][ T6031] netlink: 'syz.2.432': attribute type 9 has an invalid length. [ 54.130940][ T29] audit: type=1400 audit(1721737397.987:1641): avc: denied { connect } for pid=6030 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.152194][ T29] audit: type=1400 audit(1721737398.027:1642): avc: denied { connect } for pid=6030 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.172014][ T29] audit: type=1400 audit(1721737398.027:1643): avc: denied { read } for pid=6030 comm="syz.2.432" path="socket:[10389]" dev="sockfs" ino=10389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.199696][ T6037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.434'. [ 54.208633][ T6037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.434'. [ 54.333521][ T6060] loop0: detected capacity change from 0 to 2048 [ 54.369701][ T6074] loop2: detected capacity change from 0 to 512 [ 54.451870][ T6047] chnl_net:caif_netlink_parms(): no params data found [ 54.459702][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 54.485007][ T6199] loop4: detected capacity change from 0 to 256 [ 54.504283][ T6199] FAT-fs (loop4): bogus logical sector size 0 [ 54.510412][ T6199] FAT-fs (loop4): Can't find a valid FAT filesystem [ 54.518462][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.525582][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.532770][ T6047] bridge_slave_0: entered allmulticast mode [ 54.537932][ T6249] loop0: detected capacity change from 0 to 512 [ 54.539350][ T6047] bridge_slave_0: entered promiscuous mode [ 54.552169][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.559261][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.567135][ T6047] bridge_slave_1: entered allmulticast mode [ 54.568959][ T6249] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.573883][ T6047] bridge_slave_1: entered promiscuous mode [ 54.611093][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.623346][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.647886][ T6047] team0: Port device team_slave_0 added [ 54.654589][ T6047] team0: Port device team_slave_1 added [ 54.677772][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.686344][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.703886][ T6347] loop0: detected capacity change from 0 to 512 [ 54.712745][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.729119][ T6347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.729894][ T6347] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.738392][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.745253][ T6347] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.448: bg 0: block 248: padding at end of block bitmap is not set [ 54.750884][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.765415][ T6347] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.448: Failed to acquire dquot type 1 [ 54.790877][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.814294][ T6347] EXT4-fs (loop0): 1 truncate cleaned up [ 54.834189][ T6347] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.448: Abort forced by user [ 54.844869][ T6347] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 54.857114][ T6047] hsr_slave_0: entered promiscuous mode [ 54.863013][ T6047] hsr_slave_1: entered promiscuous mode [ 54.868805][ T6347] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 54.879285][ T6347] ext4 filesystem being remounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.893470][ T6347] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.448: Failed to acquire dquot type 1 [ 54.923520][ T6347] syz.0.448 (6347) used greatest stack depth: 9632 bytes left [ 54.996057][ T6047] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.085454][ T6047] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.153524][ T6047] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.177763][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 55.211625][ T6478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.245131][ T6047] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.293391][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 55.308906][ T6508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.460'. [ 55.333605][ T6515] loop2: detected capacity change from 0 to 128 [ 55.346169][ T6047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.357678][ T6047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.371754][ T6047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.388091][ T6531] loop0: detected capacity change from 0 to 512 [ 55.396453][ T6047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.411155][ T6533] veth1_macvtap: left promiscuous mode [ 55.428076][ T6531] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.460956][ T6533] loop2: detected capacity change from 0 to 512 [ 55.473014][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.480090][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.487396][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.494507][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.505471][ T6533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.536377][ T6533] EXT4-fs (loop2): 1 truncate cleaned up [ 55.560993][ T3163] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.569580][ T3163] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.607414][ T6549] loop2: detected capacity change from 0 to 128 [ 55.615075][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 55.626603][ T6549] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 55.626664][ T6549] EXT4-fs: failed to create workqueue [ 55.641505][ T6549] EXT4-fs (loop2): mount failed [ 55.653107][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.683523][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.704961][ T3153] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.712025][ T3153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.733286][ T6047] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.743685][ T6047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.758090][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.765313][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.766337][ T6564] loop2: detected capacity change from 0 to 128 [ 55.853601][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.956940][ T6047] veth0_vlan: entered promiscuous mode [ 55.972701][ T6047] veth1_vlan: entered promiscuous mode [ 55.993613][ T6047] veth0_macvtap: entered promiscuous mode [ 56.005412][ T6047] veth1_macvtap: entered promiscuous mode [ 56.015669][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.026123][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.035991][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.046418][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.056343][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.066826][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.076879][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.087366][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.097246][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.107674][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.119400][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.127478][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.137904][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.147730][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.158151][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.167951][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.178363][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.188163][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.198573][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.208398][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.218797][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.229632][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.240482][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 56.252739][ T6047] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.261477][ T6047] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.270185][ T6047] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.278964][ T6047] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.336884][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 56.344889][ T6601] loop1: detected capacity change from 0 to 128 [ 56.346273][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 56.361306][ T6599] netlink: 6 bytes leftover after parsing attributes in process `syz.0.475'. [ 56.408965][ T6609] SELinux: syz.0.478 (6609) set checkreqprot to 1. This is no longer supported. [ 56.531932][ T6614] SELinux: syz.0.478 (6614) set checkreqprot to 1. This is no longer supported. [ 56.572301][ T6619] loop1: detected capacity change from 0 to 2048 [ 56.721157][ T6628] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 56.752339][ T6633] xt_TCPMSS: Only works on TCP SYN packets [ 56.776812][ T6633] IPVS: Error joining to the multicast group [ 56.794990][ T6633] 9pnet_fd: Insufficient options for proto=fd [ 56.822466][ T6646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.486'. [ 56.831367][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 56.875815][ T6651] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 56.896946][ T6651] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 56.955379][ T6654] loop4: detected capacity change from 0 to 512 [ 56.996196][ T6654] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.174437][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 57.417607][ T6664] loop4: detected capacity change from 0 to 2048 [ 57.600190][ T6673] loop0: detected capacity change from 0 to 1024 [ 57.628677][ T6673] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 57.656214][ T6678] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 57.663583][ T6678] macvlan2: entered promiscuous mode [ 57.668903][ T6678] macvlan2: entered allmulticast mode [ 57.674299][ T6678] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 57.710139][ T6678] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 57.717402][ T6678] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 57.744493][ T6664] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.490: bg 0: block 234: padding at end of block bitmap is not set [ 57.758973][ T6664] EXT4-fs (loop4): Remounting filesystem read-only [ 57.778033][ T6671] EXT4-fs (loop4): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 57.971445][ T6711] syzkaller0: entered promiscuous mode [ 57.977059][ T6711] syzkaller0: entered allmulticast mode [ 58.003440][ T6714] loop4: detected capacity change from 0 to 512 [ 58.012660][ T6714] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.497: corrupted in-inode xattr: e_value size too large [ 58.028693][ T6714] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.497: couldn't read orphan inode 15 (err -117) [ 58.047199][ T6714] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.497: Directory hole found for htree leaf block 0 [ 58.060709][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 58.060720][ T29] audit: type=1326 audit(2000000001.209:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.090106][ T29] audit: type=1326 audit(2000000001.209:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.113479][ T29] audit: type=1326 audit(2000000001.209:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.136820][ T29] audit: type=1326 audit(2000000001.209:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.160018][ T29] audit: type=1326 audit(2000000001.209:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.183334][ T29] audit: type=1326 audit(2000000001.209:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.209518][ T29] audit: type=1326 audit(2000000001.209:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.232888][ T29] audit: type=1326 audit(2000000001.319:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.256231][ T29] audit: type=1326 audit(2000000001.319:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.279640][ T29] audit: type=1326 audit(2000000001.319:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a5175f19 code=0x7ffc0000 [ 58.348606][ T6721] loop4: detected capacity change from 0 to 512 [ 58.367052][ T6721] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.525070][ T6724] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.498: Directory hole found for htree leaf block 0 [ 58.687941][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.758501][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.858744][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.898347][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.958660][ T50] bridge_slave_1: left allmulticast mode [ 58.964321][ T50] bridge_slave_1: left promiscuous mode [ 58.970034][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.979185][ T50] bridge_slave_0: left allmulticast mode [ 58.984856][ T50] bridge_slave_0: left promiscuous mode [ 58.990534][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.045369][ T50] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 59.176552][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.197798][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.208537][ T50] bond0 (unregistering): Released all slaves [ 59.218538][ T50] bond1 (unregistering): Released all slaves [ 59.236789][ T6805] 9pnet_fd: Insufficient options for proto=fd [ 59.242364][ T6808] loop2: detected capacity change from 0 to 512 [ 59.253990][ T6808] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.508: corrupted in-inode xattr: e_value size too large [ 59.270358][ T6808] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.508: couldn't read orphan inode 15 (err -117) [ 59.290606][ T6734] chnl_net:caif_netlink_parms(): no params data found [ 59.302348][ T6808] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.508: Directory hole found for htree leaf block 0 [ 59.322322][ T50] hsr_slave_0: left promiscuous mode [ 59.328697][ T50] hsr_slave_1: left promiscuous mode [ 59.340355][ T6886] loop4: detected capacity change from 0 to 2048 [ 59.347240][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.347407][ T6886] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 59.354815][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.364447][ T6886] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.382892][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.390377][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.399605][ T50] veth1_macvtap: left promiscuous mode [ 59.405122][ T50] veth0_macvtap: left promiscuous mode [ 59.405627][ T6886] EXT4-fs (loop4): failed to initialize system zone (-117) [ 59.410802][ T50] veth1_vlan: left promiscuous mode [ 59.423115][ T6886] EXT4-fs (loop4): mount failed [ 59.423194][ T50] veth0_vlan: left promiscuous mode [ 59.524373][ T50] team0 (unregistering): Port device team_slave_1 removed [ 59.531366][ T3540] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 59.541785][ T50] team0 (unregistering): Port device team_slave_0 removed [ 59.581290][ T6908] loop2: detected capacity change from 0 to 512 [ 59.588051][ T6908] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.599836][ T6908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 59.608817][ T6908] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.616988][ T6908] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.513: bg 0: block 361: padding at end of block bitmap is not set [ 59.633036][ T6908] EXT4-fs (loop2): Remounting filesystem read-only [ 59.633467][ T6945] loop4: detected capacity change from 0 to 512 [ 59.646627][ T6945] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 59.648731][ T6908] EXT4-fs (loop2): 1 truncate cleaned up [ 59.655976][ T6945] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 59.661297][ T6908] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 59.669045][ T6945] EXT4-fs (loop4): 1 truncate cleaned up [ 59.678728][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.687835][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.703894][ T6734] bridge_slave_0: entered allmulticast mode [ 59.712442][ T6734] bridge_slave_0: entered promiscuous mode [ 59.730148][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.737342][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.750625][ T6734] bridge_slave_1: entered allmulticast mode [ 59.757272][ T6734] bridge_slave_1: entered promiscuous mode [ 59.773163][ T6968] loop2: detected capacity change from 0 to 1024 [ 59.781924][ T6734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.792870][ T6968] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.516: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 59.797519][ T6734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.818581][ T6968] EXT4-fs (loop2): Remounting filesystem read-only [ 59.826340][ T6968] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.841273][ T6968] EXT4-fs (loop2): mount failed [ 59.865819][ T6734] team0: Port device team_slave_0 added [ 59.876659][ T6734] team0: Port device team_slave_1 added [ 59.897217][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.904165][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.930079][ T6734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.932022][ T7078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 59.941606][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.955626][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.981593][ T6734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.024111][ T6734] hsr_slave_0: entered promiscuous mode [ 60.030368][ T6734] hsr_slave_1: entered promiscuous mode [ 60.036225][ T6734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.043758][ T6734] Cannot create hsr debugfs directory [ 60.068427][ T50] IPVS: stop unused estimator thread 0... [ 60.110372][ T6975] chnl_net:caif_netlink_parms(): no params data found [ 60.162474][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.169635][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.176785][ T6975] bridge_slave_0: entered allmulticast mode [ 60.183043][ T6975] bridge_slave_0: entered promiscuous mode [ 60.191338][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.198514][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.205868][ T6975] bridge_slave_1: entered allmulticast mode [ 60.212298][ T6975] bridge_slave_1: entered promiscuous mode [ 60.232154][ T6975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.242496][ T6975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.262038][ T6975] team0: Port device team_slave_0 added [ 60.269777][ T6975] team0: Port device team_slave_1 added [ 60.286226][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.293212][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.319169][ T6975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.330259][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.337281][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.363227][ T6975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.392760][ T6975] hsr_slave_0: entered promiscuous mode [ 60.399034][ T6975] hsr_slave_1: entered promiscuous mode [ 60.404873][ T6975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.412398][ T6975] Cannot create hsr debugfs directory [ 60.441787][ T6734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.452662][ T6734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.463075][ T6734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.473650][ T6734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.515420][ T6975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.551429][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.576087][ T6734] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.587624][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.594714][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.611889][ T6975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.618030][ T7509] __nla_validate_parse: 3 callbacks suppressed [ 60.618042][ T7509] netlink: 64 bytes leftover after parsing attributes in process `syz.4.522'. [ 60.645225][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.652297][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.681330][ T6734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.698892][ T6975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.747580][ T6734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.758792][ T6975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.825104][ T6975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.833963][ T6975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.843449][ T6975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.853206][ T6975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.866641][ T6734] veth0_vlan: entered promiscuous mode [ 60.877531][ T6734] veth1_vlan: entered promiscuous mode [ 60.899327][ T6734] veth0_macvtap: entered promiscuous mode [ 60.911379][ T6734] veth1_macvtap: entered promiscuous mode [ 60.929455][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.939967][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.949843][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.960335][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.970213][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.980636][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.990535][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.000933][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.010942][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.021514][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.033964][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.052558][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.063227][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.073262][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.083778][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.093881][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.104434][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.114235][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.124872][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.134690][ T6734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.145274][ T6734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.156136][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.167597][ T6734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.176394][ T6734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.185211][ T6734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.193888][ T6734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.217792][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.237180][ T6975] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.248266][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.255335][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.277346][ T6975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.287743][ T6975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.303933][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.311003][ T4906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.382529][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.428282][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 61.470388][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.528'. [ 61.480319][ T6975] veth0_vlan: entered promiscuous mode [ 61.492558][ T6975] veth1_vlan: entered promiscuous mode [ 61.503822][ T7567] x_tables: ip_tables: ah match: only valid for protocol 51 [ 61.521560][ T6975] veth0_macvtap: entered promiscuous mode [ 61.535532][ T6975] veth1_macvtap: entered promiscuous mode [ 61.549194][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.559680][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.569626][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.580120][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.589925][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.600375][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.610182][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.620721][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.630544][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.641086][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.650948][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.661427][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.674587][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.696525][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.706996][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.717007][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.727509][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.737409][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.747860][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.757692][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.768131][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.777985][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.788428][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.798253][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.808715][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.820953][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.836386][ T6975] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.845166][ T6975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.853965][ T6975] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.862743][ T6975] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.069778][ C0] eth0: bad gso: type: 1, size: 1408 [ 62.075312][ C0] eth0: bad gso: type: 1, size: 1408 [ 62.313920][ T7605] loop0: detected capacity change from 0 to 512 [ 62.327075][ T7605] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.452104][ T7609] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 62.471702][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.479480][ T7609] team0: Port device batadv0 added [ 62.540810][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.551871][ T7618] 9pnet_fd: p9_fd_create_tcp (7618): problem connecting socket to 127.0.0.1 [ 62.747091][ T7623] netlink: 'syz.1.538': attribute type 11 has an invalid length. [ 62.762025][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88810c031000: rx timeout, send abort [ 62.770345][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88810c030800: rx timeout, send abort [ 62.778686][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88810c031000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.793062][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88810c030800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.809791][ T7628] loop1: detected capacity change from 0 to 512 [ 62.820012][ T7628] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.540: bg 0: block 393: padding at end of block bitmap is not set [ 62.836175][ T7628] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 62.845225][ T7628] EXT4-fs (loop1): 2 truncates cleaned up [ 62.930184][ T7649] loop1: detected capacity change from 0 to 1024 [ 62.938642][ T7649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.984323][ T6047] ================================================================== [ 62.992503][ T6047] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 62.999985][ T6047] [ 63.002300][ T6047] read-write to 0xffff888237d2b3b0 of 1 bytes by task 7643 on cpu 1: [ 63.010359][ T6047] mlock_new_folio+0x114/0x200 [ 63.015122][ T6047] folio_add_lru_vma+0x5d/0x60 [ 63.019891][ T6047] handle_mm_fault+0x22fd/0x28c0 [ 63.024840][ T6047] __get_user_pages+0x499/0x10d0 [ 63.029788][ T6047] __mm_populate+0x25b/0x3b0 [ 63.034372][ T6047] __se_sys_mremap+0x960/0xf20 [ 63.039130][ T6047] __x64_sys_mremap+0x67/0x80 [ 63.043801][ T6047] x64_sys_call+0x29c8/0x2e00 [ 63.048470][ T6047] do_syscall_64+0xc9/0x1c0 [ 63.052967][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.058873][ T6047] [ 63.061192][ T6047] read to 0xffff888237d2b3b0 of 1 bytes by task 6047 on cpu 0: [ 63.068726][ T6047] need_mlock_drain+0x30/0x50 [ 63.073402][ T6047] __lru_add_drain_all+0x235/0x410 [ 63.078522][ T6047] lru_add_drain_all+0x10/0x20 [ 63.083288][ T6047] invalidate_bdev+0x47/0x70 [ 63.087885][ T6047] ext4_put_super+0x571/0x840 [ 63.092558][ T6047] generic_shutdown_super+0xde/0x210 [ 63.097843][ T6047] kill_block_super+0x2a/0x70 [ 63.102519][ T6047] ext4_kill_sb+0x44/0x80 [ 63.106857][ T6047] deactivate_locked_super+0x7d/0x1c0 [ 63.112231][ T6047] deactivate_super+0x9f/0xb0 [ 63.116906][ T6047] cleanup_mnt+0x268/0x2e0 [ 63.121322][ T6047] __cleanup_mnt+0x19/0x20 [ 63.125733][ T6047] task_work_run+0x13a/0x1a0 [ 63.130312][ T6047] syscall_exit_to_user_mode+0xbe/0x130 [ 63.135855][ T6047] do_syscall_64+0xd6/0x1c0 [ 63.140345][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.146492][ T6047] [ 63.148798][ T6047] value changed: 0x18 -> 0x1d [ 63.153451][ T6047] [ 63.155755][ T6047] Reported by Kernel Concurrency Sanitizer on: [ 63.161889][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz-executor Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 63.172377][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 63.182424][ T6047] ================================================================== [ 63.301121][ T7618] 9pnet_fd: p9_fd_create_tcp (7618): problem connecting socket to 127.0.0.1 [ 65.564443][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!