last executing test programs: 5.266143507s ago: executing program 3 (id=7896): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xe000000d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r3, 0x4, 0x4400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000020000850000001700000085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r3, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) fallocate(r4, 0x10, 0x0, 0x9) io_submit(r7, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES8=r5, @ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcf, &(0x7f0000000600)=""/207, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x11, &(0x7f0000000140)={@local, @local, @void, {@generic={0x17, "c6cc5b"}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='-7'], 0x9) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x3, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) 4.733944789s ago: executing program 3 (id=7900): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f00000001c0)=@in4={0x21, 0x0, 0xa, 0xe, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) io_uring_enter(r2, 0x6256, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) fallocate(r0, 0x0, 0x0, 0x1000f4) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x700, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000040000000000000000a01d9541dfb2cf00000300000000000000000100000000000000000000000100000d0000000003000000040000000000000000000003000000000500000001000000000000000f00000000000008050000000000000000000001000000001e004c06006100004bd2edb35b2b60cb68d186cf5e2217dc4abc3cbe9835d0e52aa103b7812f73cbc39dc989c46c21b958be"], 0x0, 0x60, 0xfffffead}, 0x20) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000061109e20000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'veth0_to_hsr\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) 4.444336164s ago: executing program 3 (id=7903): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x280200, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "907360000013eb00"}) r4 = dup(r3) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x401, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x1, 0x4, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000015c0)=[{0x0, 0x2, 0x0, 0xa}, {0x2, 0x4, 0x7}, {0x1, 0x3, 0x10, 0x4}], 0x10, 0x5}, 0x90) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000036c0)=ANY=[@ANYBLOB], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001440)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r8, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="0800050001000000b4000880"], 0xd8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x24}}, 0x0) 4.217263769s ago: executing program 3 (id=7907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8) socket$netlink(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.268905915s ago: executing program 3 (id=7917): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0xea4e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14, 0x800) connect$pppl2tp(r5, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x1, 0x4, 0x4, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x2000000}}}, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000300)=[{0x2}, {0x1, 0x5, 0xf4, 0xc1}]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe421410b735cc1fb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x898}}, {@i_version}]}, 0x0, 0x5e0, &(0x7f0000001200)="$eJzs3c1vFVUbAPBn7m1LS3nfFvLmVVxIE2MgUVpawBDjAraGNPgRN26stCBSoKE1WjShJLgxMW6MMXHlQvwvlMiWla5cuHFlSIgaliZeM7czpbed29LPqczvl1w6c84dzjO9fTrnnp4zN4DKGkj/qUXsj4ipJKIvmVuo64iscmD+eQ/+/Ohs+kii0Xjt9ySSrCx/fpJ97c0O7o6IH39IYl99ebvTs9cujk1OTlzN9odmLk0NTc9eO3zh0tj5ifMTl0deGDlx/NjxE8NH1nVe1wvKTt989/2+T0bf/Oarv5Lhb38ZTeJkvJw9cfF5bJaBGGh+T5LlVb0nNruxktSzn5PFL3HSUWJArEn++nVGxBPRF/V4+OL1xcevlBocsKUaSUQDqKhE/kNF5f2A/L390vfBtVJ6JcB2uH9qfgBgef53zI8NRndzbGD3gyQWD+skEbG+kblWeyLi7p3Rm+fujN6MLRqHA4rN3YiIJ4vyP2nmf390R38z/2st+Z/2C85kX9PyV9fZ/tKhYvkP22c+/7tXzP9ok/9vLcr/t9fZ/sDDzXd6WvK/Z72nBAAAAAAAAJV1+1REPF/09//awvyfKJj/0xsRJzeh/YEl+8v//l+7twnNAAXun4p4qXD+by2f/dtfz7b+05wP0JmcuzA5cSQi/hsRh6JzV7o/vEIbhz/d92W7uoFs/l/+SNu/m80FzOK417Gr9ZjxsZmxjZ43EHH/RsRThfN/k4Xrf1Jw/U9/H0w9Yhv7nr11pl3d6vkPbJXG1xEHC6//D+9akax8f46hZn9gKO8VLPf0h59916799ea/W0zAxqXX/90r539/svh+PdNrb+PobEejXd16+/9dyevNW850ZWUfjM3MXB2O6EpO19PSlvKRtccMj6M8H/J8SfP/0DMrj/8V9f97ImJuyf+d/NG6pjj3/797f20Xj/4/lCfN//E1Xf/XvjFyq//7du0/2vX/WD26Iw5lJcb/YN4XeZp2tZYXpGNHUdV2xwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj4NaROyJpDa4sF2rDQ5G9EbE/2J3bfLK9Mxz5668d3k8rWt+/n8t/6Tfvvn9JP/8//5F+yNL9o9GxN6I+Lze09wfPHtlcrzskwcAAAAAAAAAAAAAAAAAAIAdorfN+v/Ub/WyowO2XEfZAQClKcj/n8qIA9h+rv9QXfIfqkv+Q3XJf6gu+Q/VJf+huuQ/VFf7/E+2NQ4AAAAAAGBT7D1w++ckIuZe7Gk+Ul1ZXWepkQFbrVZ2AEBp3OIHqsvUP6gu7/GB1Sb6drc9aCNThKfObuBgAAAAAAAAAAAAAKicg/ut/4eqsv4fqsv6f6iufP3/gZLjALaf9/hArLKSv3D9/6pHAQAAAAAAAAAAAACbaXr22sWxycmJqzbe2BlhbOdGo9G4nv4U7JR4/uUb+VT4nRLPko18rd+jHVXe7yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDVPwEAAP//TKckzg==") r7 = open(&(0x7f0000000500)='./file0\x00', 0x200a00, 0x147) lstat(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000580)) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000340), 0xfffffc8d) fallocate(r7, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x107, 0x1ff, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=""/217}, 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.134851556s ago: executing program 3 (id=7921): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, {0x0, 0xff}, {0x0, 0xff}}], 0x20) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000240)={@val={0x0, 0xf5}, @val, @arp=@generic={0x0, 0x0, 0x6, 0x0, 0x0, @remote, "", @local}}, 0x22) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 1.374717847s ago: executing program 1 (id=7951): keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40200, 0x61}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000000100)={0x8, {"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", 0x1000}}, 0x1006) keyctl$session_to_parent(0x12) timer_create(0x5, &(0x7f0000001200)={0x0, 0x3c, 0x0, @thr={&(0x7f0000001140)="c5bfd6154b62420c95ccbde34545b13c654f2f6432d73cfbfe69828119b7368f90d77fc08a4475d720656c45e61f8872b8a8eeb5f471a94385a7b54d55e04fe18661f3e287901607dbe53fe3ac2d7e4095e3c3ea0010ae6f1ba7120608e177a6422ed147ec6a8d20802dcc2d19e0b10c6d1a7403fd3a311a6d", &(0x7f00000011c0)="621aef021d532f6715379fbb634fbb57ce70d3e5beda695345caa43948c6e5a3189b28"}}, &(0x7f0000001240)) keyctl$session_to_parent(0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r0, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000001540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0x25, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x24, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @jmp={0x5, 0x1, 0xc, 0x8, 0x6, 0x20, 0xfffffffffffffffe}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5d5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001400)='syzkaller\x00', 0xff, 0x1f, &(0x7f0000001440)=""/31, 0x41000, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[r0, r0, r0, 0x1, r0], 0x0, 0x10, 0x4}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000018c0)={0x338, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "c2e647356b6554"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000028c0)={{r5, 0x5, 0x4, 0x8001, 0x4417, 0x80000000, 0x0, 0x101, 0x4, 0x1f, 0x3ff, 0x101, 0x9, 0x0, 0x3}, 0x18, [0x0, 0x0, 0x0]}) keyctl$session_to_parent(0x12) r6 = socket$netlink(0x10, 0x3, 0xf) r7 = open_tree(r0, &(0x7f0000002980)='./file0\x00', 0x81000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f00000029c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002a80)={'syztnl1\x00', &(0x7f0000002a00)={'syztnl2\x00', r3, 0x2f, 0x9, 0x5, 0xff, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x20, 0x7, 0x6}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x34, r8, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf9}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000002c40)=""/67) r10 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r10, &(0x7f0000002f00)={&(0x7f0000002cc0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002d00)=""/206, 0xce}, {&(0x7f0000002e00)=""/113, 0x71}], 0x2, &(0x7f0000002ec0), 0x0, 0x40000}, 0x800) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000002f80)={0x3, &(0x7f0000002f40)=[{0x3d, 0x3e, 0x7, 0x5}, {0x9, 0x8, 0x4, 0x6}, {0x7, 0x0, 0x55, 0xfffffffd}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002fc0)) 1.347931892s ago: executing program 1 (id=7952): r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_get$pid(0x2, r2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0x60, [0x5, 0xffffffff, 0xffffffff00000000, 0xfffffffffffffffa, 0x80000001, 0x10000], 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/96}, &(0x7f00000001c0)=0x78) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000691128000000000085100000020000008500000005000000950000200000f763025136173aaf0000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 1.325634055s ago: executing program 1 (id=7953): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000340)='0', 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000304000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r5], 0x48}}, 0x0) read(r3, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) setsockopt$sock_attach_bpf(r9, 0x88, 0x67, &(0x7f00000002c0)=r10, 0x4) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='&', 0xffe3}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast}}}], 0x20}, 0x0) setresuid(0x0, 0x0, r8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf670000000000004506000023ff07006706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070000000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb10dc8c27df8ecf264e0f8cf9f17d3c30e3c7bdd2d17f2f1754558f1e78af0100008000000000b1d89bd4601d295c45a6a0b9bdb7dd39974bc903d6c4f6f3be4b369289aa684bafb9f759fc5b12b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a249a3cca76d8bf260000c6c60bf70d742a810000000000000081b75dbc54e3ec8f3915db069c3b750b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2064b004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888f00010000000000049bc1172ba7cbebe1e1f82da672748f4405e0d6b03233f9aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57ab282e9ae0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf09dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7ec8d3e9e645a1d91875b82bf2d1c7ab04871bc47287cd31cc43ea0ffb567b40407d130000000000000009cb3826df5f37d83f84e98a3a3d80bd0d0da62a34ea643839c3990cdb79ab3f2f95c6b0c94cce6994521628ab028acfc1d926a0f6a5480a55c22fe394ac00000000000000000000be82ac4d00defb79ea2420ff8e41a2847c00be697e0acc2a9572ec1b6b218ca5977d7849ded5127bb70d51856bdd0400000054451462e6f8f4d08eb99dfbb255b7f314ba3f3e230b0e1cda051104af4ce8e87c532d019cd9c302002600006551bae7bac239ec79017a8238b577af0b032c171f09bd3bf8c1992f2b3a0c8187b684e7c3a8c3a4c2df9df903dea152c1328142c066268262f0c0abd86b8d79e802d11bd5cb3378ce029c02f6a00291c8e292697e2b593087d8811da049c2a2bc3f65c09454fe5635df7946c14bb98deb61cf70c7e6603d6624b6051a6f9d1abbd4e8de431d73279079d028cc6d48d4e04e0fe709d8cf71f005e627b060c8a29eca275177744d0e233eee30151ec8af6567514242436d49e1994bc85cd820c46f84308245be7abdb071484bb54364adb4d95b4fd10473fef89660acacb3b24ac7b45b8f0e8538960e9150f43318621f1074de26010088bce9d123b595a9a0602d63c4836541769566044cd6930fdcc9b2d810c1ba013d8f49ada983858596e086f2f0a5007146f009a31c1b06cacc3aef772ccf9c46c33d71b9be24a958b40b3947e6889cd3c34df63f4b17ec2b5b8984edff055233d044bd533548c9608cac4a7ccd9ceb9323a75eeb6084125dee0b4ef0543e473bec317e3dd74f152e24fe2752bfecff7ba32ca56b2a56e787e265966af7c5f4257266e76952a40096d34ee55ea0a327814cc15bc07394d9b59e34a58415195ba9617f21fa1f0effa67d2bee51068cc00f07acc76dbb8247e29b428a8b5d0a9f226928a1757fb5d9f4724d637770af4b21e707d681a48f186d9be250efa86cc3a25b74376aa1028d44b42d1e2a63a35c7bf61ecc0a98404fbe1571c8465db33c405dd9466d86c33b15f1d346dda990f27a0862f59e7067653b795456c01c696183ff13f9d75160a195b23f668f7e042525f5ac823cec23e52816c45ef08754975bee4bb593c3247667d96c1e963bdc4dd401b97e0f51b817c4d5df7f5b1e31cdc05b889ecc7a9505da27bbb3fc283a161c90eab72807d4a240586d9f3f11a50c85e2696ec31844090a619f84cf7ac3802a9244e6d0311ef64c6d72161d897d34c3438f733e193f1a1e769dee6871d7af0545b7a2486fd872be7d4972d3d00d69a2b2187d39d3467636f2d18bb5da8af3e313327775ef6232c024c2bfe45cdf01c2ae5496ec62f1d12bfada519a61c167f8c8964fb08586a5acb1de735af4d464b4d6f9f5adf0d4210000000000000000000000d1a5880b1db3a40656118c614a98bb2b06e77c8399f2d5d5df23269d6320492eb36a861d19f9986287cf8b25ace555cd2e9b6f7de733eaf7e6bd24e99338d285f552c2da1f06611862703f8df7c149c785ebdec82eb82056866cf6c6da1b3b7b2566948ee0f9d042302651b0b5f4775051b51172b595381b31cc997d541b9059eb2ae5d97d9a0d80870ba088986ba98e190edb3b52f04486995965efd278f2d3060caefb38526203e242f7e306c0e9606abd935e728c6df146e3bb2a1200000000009661ec772d9261b24d9dd5f5ac74b2222a69e1deee9a1d6e68e3e5024c745d46ca5a3a484c0e81815d21165aa7fadc49cba1272517d079114cae7928dc70f8141aa6fec6da716a8ad9ff9010a2e07763755c78921275101ec25d77cbdecf0e92c63b9db99cacd72b62f7ef95e0955625ffffffff284511bc245d1f3b9351a3d3c8dd22b00f66df1b59bda8cc1a2dd8cc985b8ddaa10aa46a4c4e34c8d50034fd2fbca5a557c0ca84be0ecfd5cbe573da6bdf2abdd4a8ae92e30d1cea4ba9ce0dcaa940f7af67cddc0faa6c032e7183b6d4c2d8638c07611684108ef7a71b332b74acee0cdd5ee7e64cb1bbfb4bcaf3c1094262d9350c97848ac98c5c30e4d016bbc94f92c2f5d300fd767fa948ccb5d889669503386152e38d97f5e38b95e8e62a50c1612ad80b95fe7f8648a3bd004c0cd402e90b754034a94b248671bfbb41edfe7d0150e6ee48ead44333f6dd0c273ad5c5affef57d52ecdf55b60bfa7172864838a080bcdcb42be68b0ee6286f28933a9563feaf3d27ce782013bc47567ef65ed40000000000000000000000000000000000000000d3fc35e8ed2229e633af6a8722d044b9cf146ea6fd7ee51f284fa5d54649d9d23ed3eaf0bf4b0a2b2b77b5ba1880430033ad3b6f64188024fa7be0dc2fb8154a15ab5fbe0bbaeabca55a6211df4e68fd982e903dede5096b23aa294a11dbe101685891c199d644d40cd3721eba27c23c2daf56147b856b33a2aa010ab55478e551ca69d8f588e77c3f6c0ad72e55626b3e397b858192b7498d4da2123133a3e9cb8060d4a1fba148dde9369789c6d3b2b5f0322a59654eec2d6793766833b5b928092814ae1b03e4548b55885518de596b99f18055844a8a0e4a54277dd3e8f68a2a8a2f0bbb3b42c650d0bfd89ee0d29d97c98a0dae2afde4b4e28a0ad4b1525c58b4d3997e86123b6975803f49e3f164c5d18f"], &(0x7f0000000100)='GPL\x00'}, 0x48) prlimit64(0x0, 0x0, 0x0, 0x0) 1.10331977s ago: executing program 1 (id=7954): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000340)='0', 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000304000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r5], 0x48}}, 0x0) read(r3, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) setsockopt$sock_attach_bpf(r9, 0x88, 0x67, &(0x7f00000002c0)=r10, 0x4) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='&', 0xffe3}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast}}}], 0x20}, 0x0) setresuid(0x0, 0x0, r8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) prlimit64(0x0, 0x0, 0x0, 0x0) 921.829958ms ago: executing program 1 (id=7961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d00000476010000ad92000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pause() r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x46, 0x39}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) r6 = socket(0x1d, 0x2, 0x7) accept4$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x8923, &(0x7f00000000c0)={'gre0\x00', 0x0}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8c0c2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x4c, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x4c}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x90, 0x7800, 0x800, 0x1, {{0x15, 0x4, 0x3, 0x1, 0x54, 0x65, 0x0, 0x80, 0x4, 0x0, @local, @multicast1, {[@ssrr={0x89, 0x7, 0xc1, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x1c, 0x69, 0x3, 0xc, [{@multicast1, 0x1000}, {@remote, 0xffff0000}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x1}]}, @timestamp={0x44, 0x14, 0xb0, 0x0, 0x9, [0x2, 0x7, 0x6, 0x3f]}, @lsrr={0x83, 0x7, 0x3a, [@broadcast]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)={0x88, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r12 = open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) ftruncate(r12, 0x2007fff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x9, 0x7, 0x2c, 0x808, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x24, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x500}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @ldst={0x3, 0x2, 0x1, 0x4, 0x3, 0x20, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x63, '\x00', r4, 0x4, r5, 0x8, &(0x7f0000000480)={0x7, 0x200}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x5, 0x200}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[r7, r11, r12, r13, r14], &(0x7f0000000740)=[{0x1, 0x4, 0x0, 0xb}]}, 0x90) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r15, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r15, 0x6, 0xa, &(0x7f00000001c0), 0x4) 574.313511ms ago: executing program 2 (id=7970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfff0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000019000100deffffffffffffff1c140000fe000001000000206b399cb505001a0003000000"], 0x24}}, 0x0) 511.346531ms ago: executing program 2 (id=7972): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x280200, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "907360000013eb00"}) r4 = dup(r3) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x401, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x1, 0x4, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000015c0)=[{0x0, 0x2, 0x0, 0xa}, {0x2, 0x4, 0x7}, {0x1, 0x3, 0x10, 0x4}], 0x10, 0x5}, 0x90) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000036c0)=ANY=[@ANYBLOB], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001440)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r8, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="0800050001000000b4000880"], 0xd8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x24}}, 0x0) 509.852221ms ago: executing program 0 (id=7974): r0 = socket(0x11, 0x800000003, 0x0) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0), 0x4) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='fd', 0x0, r4) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [], [0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}}, 0x0) 504.464752ms ago: executing program 0 (id=7975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x1c) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x2, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000001ceadc1f1529d6695a53bf21e4", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='ext4_ext_rm_idx\x00', r4}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x2bda6000) syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000780)="831e2ec8a1f2dcdebc30b365be173f0b591a8530e3d65a3a60330b7be8340ca04595a125ec45129d40045f3fad227df993913d0f4060d797a25ec17249ccec510ffc317f5bbf68f83b2a6b65149e22d51b43b618cba5147bcc7e50ac3c91304ca3e609317aae63ef0a78a2e6ca2a91776b5e892593541a2f00a275871a84ebbc178abf41d25bc18065375fc881dcc19d78da1c3c29a706881f85b656b8739d0d5888223b16ef37abd083cc9ffb3166e064cdc2586f48c8b7042e8558b917607d4c0cf06ac6fdeca87170ad7345ffa775a412854606f2169d9d76e6b2", &(0x7f00000003c0)=""/55, &(0x7f0000000640)="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", &(0x7f0000000540)="1a87b5b4c38371e5c16706531008a1d24f7a9d7d66bc8213c83ad4667b316aa06918abc929be262ef05e6c70d954aacc9461a8f25c39c2fc3b6e6e9827ada25eaa899c92c86ba4e3067bb5df15499f26bfa960c6890f1a20856999c4c376fa5dccdfc39c776f7150f458d0dfafc927afa16c587044a94cba650e6a4bafda7b6e7912d41254a66178b798bb9a1fc06eea6c7a113cb78123cc3dffbcbbfd450783aec92e69f54d6e90b0dba7c9", 0x2800000, r0}, 0x38) r6 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) fsmount(0xffffffffffffffff, 0x0, 0x80) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r7}) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x0, @fd_index, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 470.387127ms ago: executing program 0 (id=7976): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000300)={0x18, r3, 0x787, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmmsg$unix(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="6f0272acf9a842a8672e8cf5df404ad59c9bba3268da3346867f93a1718be7671c7bf43de59ce6e95006a2d8541955c16caa318cb533173f6d7e39ef62bce0c8d7692c6741", 0x45}, {&(0x7f0000000100)="db47f16c95ec6fe41c3d0f07146fcc31cea58c6380f5ddb1497dac65502a756ed601689e9bada7929d2369654ec976444f234a96cdbc64940430b6256e0af799c9ccf4", 0x43}, {&(0x7f0000000180)="1c956e3ae7a7ef1a025d0593bd0d2107ce7998883cf83ecd78732e6c93679674c439bbc9d4a1831c87d06b8f9cf146bb23f765", 0x33}], 0x3, &(0x7f0000000200)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r0]}}], 0x58, 0x80}}], 0x1, 0x240000c5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x4}, @ldst={0x6, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x99, &(0x7f0000000200)=""/153}, 0x90) sendmsg(r1, &(0x7f0000000680)={0x0, 0xa, &(0x7f0000000980)=[{&(0x7f0000000880)="9414134df25568cb24", 0x9}], 0x1}, 0x0) lseek(r0, 0x2, 0x0) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/39, 0x27}, {&(0x7f00000004c0)=""/179, 0xb3}], 0x2}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000220000b50000000000feff00760000000f00000065000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x52ba, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000880)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xe, 0x2000ac0a, 0x0) ioctl$sock_SIOCINQ(r4, 0x5452, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r4, 0x58, &(0x7f0000000400)}, 0x10) r8 = eventfd2(0x3ff, 0x800) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f00000005c0)) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xa28000}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)={0x280, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7d}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5f0}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3cd, @mcast2, 0x1}}}}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "9d6c6b505ba06803b9cf695cb75ef1c56509398495d87ed60f96c3d772738b"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "8c7f7a002ff5cdb1cbe095b540761d8e11f9a08db00306757a7675"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x8010}, 0x20008014) sendmmsg(r1, &(0x7f0000000380), 0x10, 0x0) 388.14377ms ago: executing program 4 (id=7978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "ec69d337", "df02000000000ece"}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000440)={{r0}, 0x1, &(0x7f00000003c0)=[0x7], 0x1, 0x5}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x5, 0xfffffffe, 0xfffffffc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x4d, 0x1}, 0x7) 387.56228ms ago: executing program 2 (id=7979): unshare(0x62040200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x500, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x228, 0xb, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x215, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wg0\x00', 'pim6reg0\x00'}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0xec010000, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1000}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 387.00598ms ago: executing program 4 (id=7980): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x22a0b}}, 0x74}}, 0x0) 348.673096ms ago: executing program 4 (id=7981): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000480)="80", 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 321.29601ms ago: executing program 2 (id=7982): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x3) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) rt_sigaction(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003e7100000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pipe2$9p(&(0x7f0000000240), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='locks_get_lock_context\x00', r5}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x1, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x1, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f00000004c0)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r9, &(0x7f00000002c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) 320.72208ms ago: executing program 0 (id=7983): r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000004740906080002000000000014000300fc02000000000000000000000000000014000600626f6e6430000000000000000000000014000300ff02240000000000000000000000000110c29a96db3eea3f20ec6156dbbf9d91229804d120ed5d3b5df62e18a97a560a6d7aa6a31c6bccd8c41bf2a44a"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r4) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000040)) socket(0x11, 0x80a, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x80001, 0x13c) sendto(r8, &(0x7f0000000340)="120000001200e7ef030000000000000000a10115693d4d72f237f23ac211e130fb4e166ba5078489dd05e4fe1cc82d58b43e9a3039245697d1869fbe2656793fe7a86d2ecf0d9bbe96d586c3f44a0a88cee19c524695f3be24732ee29cf2650f57d23446cd11ab4888785241d221dee30e7e08dea61165145c1b283540325473d3a42e88493ecd374962321383411139068884687e17e48dcdb6513476a7d7404e968e0cda29834855fb345e2b88", 0x8b, 0x4004840, 0x0, 0x32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01250500000008000400da0c00000500d78352160117d005000000000008000400000400dcab36b12feeca6ea0060001000a00000014000400200100000000000000000000000000010500020001000000050005001f000000080003000100"/105], 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x45d0, 0x1, 0x0, 0x1000000) 318.901291ms ago: executing program 4 (id=7984): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 235.238463ms ago: executing program 2 (id=7985): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001080)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd81}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2000400) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) listen(r4, 0x0) r5 = fsmount(r3, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x16, 0x0, 0x4, 0xff, 0x2290, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1b, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) write$binfmt_script(r9, &(0x7f0000000e00)={'#! ', './file0', [{0x20, 'data=writeback'}, {0x20, 'GPL\x00'}, {0x20, '&$!.'}], 0xa, "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"}, 0x121) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x29, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800ff01000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018350000030000000000000000000000181f0000", @ANYRES32=r8, @ANYBLOB="000000000000000020c2030004000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x11, r5, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x3, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000006c0)=[r4], &(0x7f0000000cc0)=[{0x4, 0x3, 0xa, 0x9}, {0x2, 0x5, 0x0, 0x7}, {0x1, 0x0, 0xf, 0x4}, {0x4, 0x3, 0x2, 0x4}, {0x1, 0x2, 0xa, 0x2}, {0x1, 0x3, 0x6, 0x4}], 0x10, 0x7}, 0x90) epoll_create1(0x0) umount2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000a50000006600000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0xc5, &(0x7f0000000380)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x264a}, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) 234.758623ms ago: executing program 0 (id=7986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x1c) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x2, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000001ceadc1f1529d6695a53bf21e4", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='ext4_ext_rm_idx\x00', r4}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x2bda6000) syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000780)="831e2ec8a1f2dcdebc30b365be173f0b591a8530e3d65a3a60330b7be8340ca04595a125ec45129d40045f3fad227df993913d0f4060d797a25ec17249ccec510ffc317f5bbf68f83b2a6b65149e22d51b43b618cba5147bcc7e50ac3c91304ca3e609317aae63ef0a78a2e6ca2a91776b5e892593541a2f00a275871a84ebbc178abf41d25bc18065375fc881dcc19d78da1c3c29a706881f85b656b8739d0d5888223b16ef37abd083cc9ffb3166e064cdc2586f48c8b7042e8558b917607d4c0cf06ac6fdeca87170ad7345ffa775a412854606f2169d9d76e6b2", &(0x7f00000003c0)=""/55, &(0x7f0000000640)="8dc37ae204479f1c323625dc3bcdc3d1b753dbd0bfd77cac25d5239253dcba6f785d7012b7abfa027179c8d268a0c1a58774ca4a6002a00195ce207105346c54603a337313c9fde4313cd4749541010487007db7eb0340fc01a7a2ad44e47bf545331bf22064391171a4c45a920fcf49b354bb1ba266861b848a065c1be31307e16f58dad7156ada7117c2e6113f5b67ce678fc7f50fcf9ac7f398d9b3b7ef8eb8486e6f881bf7825e65f5dbb8f0f603ad934195cee959a43d665dc4875d572efb009404a50e87d081255041348c2870fb03eb1f15278ed0830ea2fd4b3bb04ced70e38a1fbe21da1fd516265d0a876ac4d9bd3abb75ab8c3fc9e502b514a99336b8a5ddd97892acf71ac0c5b5ff4e60c1257b87634492338395e161a1d63016ee571b14592b4ac892d08f474171e9d3d1e0039cc62d0866855c", &(0x7f0000000540)="1a87b5b4c38371e5c16706531008a1d24f7a9d7d66bc8213c83ad4667b316aa06918abc929be262ef05e6c70d954aacc9461a8f25c39c2fc3b6e6e9827ada25eaa899c92c86ba4e3067bb5df15499f26bfa960c6890f1a20856999c4c376fa5dccdfc39c776f7150f458d0dfafc927afa16c587044a94cba650e6a4bafda7b6e7912d41254a66178b798bb9a1fc06eea6c7a113cb78123cc3dffbcbbfd450783aec92e69f54d6e90b0dba7c9", 0x2800000, r0}, 0x38) r6 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) fsmount(0xffffffffffffffff, 0x0, 0x80) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r7}) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x0, @fd_index, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 234.497543ms ago: executing program 4 (id=7987): syz_emit_ethernet(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000001180)={0x2}, 0x8, 0x0) 196.65595ms ago: executing program 0 (id=7988): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xe000000d}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r3, 0x4, 0x4400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000020000850000001700000085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r3, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) fallocate(r4, 0x10, 0x0, 0x9) io_submit(r7, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES8=r5, @ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcf, &(0x7f0000000600)=""/207, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x11, &(0x7f0000000140)={@local, @local, @void, {@generic={0x17, "c6cc5b"}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='-7'], 0x9) 100.265954ms ago: executing program 4 (id=7989): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) epoll_create(0x0) (async) r5 = epoll_create(0x0) epoll_pwait2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) ioctl$RNDADDENTROPY(r6, 0x5452, &(0x7f0000000000)=ANY=[]) (async) ioctl$RNDADDENTROPY(r6, 0x5452, &(0x7f0000000000)=ANY=[]) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r9, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r10, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, 0x6}}, 0x400, 0x3, 0x4, 0xc8, 0x7}, &(0x7f0000000100)=0x98) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, 0x6}}, 0x400, 0x3, 0x4, 0xc8, 0x7}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={r11, 0xa08}, &(0x7f00000003c0)=0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4}, 0x40) syz_emit_ethernet(0xfdc0, &(0x7f0000000100)=ANY=[], 0x0) 27.419556ms ago: executing program 2 (id=7990): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x280200, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "907360000013eb00"}) r4 = dup(r3) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x401, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001580)={0x1, 0x4, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000015c0)=[{0x0, 0x2, 0x0, 0xa}, {0x2, 0x4, 0x7}, {0x1, 0x3, 0x10, 0x4}], 0x10, 0x5}, 0x90) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xd0, 0x0, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000036c0)=ANY=[@ANYBLOB], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001440)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r8, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="0800050001000000b4000880"], 0xd8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x24}}, 0x0) 0s ago: executing program 1 (id=7991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x303, 0x38}, "be00", "00000c70423a000000000000ffff00", "ec69d337", "df02000000000ece"}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000440)={{r0}, 0x1, &(0x7f00000003c0)=[0x7], 0x1, 0x5}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0x5, 0xfffffffe, 0xfffffffc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x4d, 0x1}, 0x7) kernel console output (not intermixed with test programs): us mode [ 472.458839][T25517] macsec1: entered promiscuous mode [ 472.464210][T25517] macsec1: entered allmulticast mode [ 472.469573][T25517] hsr0: entered allmulticast mode [ 472.474765][T25517] hsr_slave_0: entered allmulticast mode [ 472.480505][T25517] hsr_slave_1: entered allmulticast mode [ 472.487994][T25517] hsr0: left allmulticast mode [ 472.492814][T25517] hsr_slave_0: left allmulticast mode [ 472.498262][T25517] hsr_slave_1: left allmulticast mode [ 472.589794][T25519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6922'. [ 472.816374][T25533] netlink: 'syz.4.6927': attribute type 27 has an invalid length. [ 472.824347][T25533] bond0: left promiscuous mode [ 472.829268][T25533] bond_slave_1: left promiscuous mode [ 472.835259][T25533] hsr0: left promiscuous mode [ 473.156570][T25563] loop3: detected capacity change from 0 to 764 [ 473.173932][T25563] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 473.198970][T25563] Symlink component flag not implemented [ 473.204637][T25563] Symlink component flag not implemented [ 473.212321][T25563] Symlink component flag not implemented (128) [ 473.218533][T25563] Symlink component flag not implemented (122) [ 473.254465][ T29] audit: type=1326 audit(2000000362.037:14332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25562 comm="syz.3.6936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc998d81b99 code=0x0 [ 473.487723][T25587] netlink: 'syz.2.6945': attribute type 27 has an invalid length. [ 473.495776][T25587] bond0: left promiscuous mode [ 473.500640][T25587] bond_slave_1: left promiscuous mode [ 473.624249][T25590] random: crng reseeded on system resumption [ 473.820023][T25593] netlink: 'syz.4.6947': attribute type 27 has an invalid length. [ 474.214911][T25620] random: crng reseeded on system resumption [ 474.221478][T25619] netlink: 'syz.4.6958': attribute type 27 has an invalid length. [ 474.406003][T25638] bridge_slave_1: left allmulticast mode [ 474.411750][T25638] bridge_slave_1: left promiscuous mode [ 474.417394][T25638] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.688256][T25671] batman_adv: batadv0: Adding interface: ipvlan2 [ 474.694730][T25671] batman_adv: batadv0: Interface activated: ipvlan2 [ 474.735158][T25680] netlink: 'syz.0.6981': attribute type 27 has an invalid length. [ 474.907211][T25680] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.914489][T25680] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.108977][T25680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.145871][T25680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.195003][T25680] hsr0: left promiscuous mode [ 475.261077][T25680] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.269769][T25680] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.278431][T25680] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.286880][T25680] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.301433][T25680] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 475.435515][T25708] loop2: detected capacity change from 0 to 512 [ 475.511176][T25708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.524070][T25708] ext4 filesystem being mounted at /root/syzkaller.xXiHGh/133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.532534][T25712] batman_adv: batadv0: Adding interface: ipvlan2 [ 475.540155][T25708] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.6989: corrupted inode contents [ 475.542814][T25712] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.542845][T25712] batman_adv: batadv0: Interface activated: ipvlan2 [ 475.562635][T25708] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.6989: mark_inode_dirty error [ 475.599171][T25708] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.6989: corrupted inode contents [ 475.611438][T25708] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.6989: mark_inode_dirty error [ 475.633688][T25708] Falling back ldisc for ptm0. [ 475.695396][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.718282][T25726] net_ratelimit: 27 callbacks suppressed [ 475.718301][T25726] netlink: del zone limit has 4 unknown bytes [ 475.723465][T25728] __nla_validate_parse: 9 callbacks suppressed [ 475.723482][T25728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6997'. [ 475.812667][T25733] loop2: detected capacity change from 0 to 512 [ 475.842574][T25733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.867241][T25733] ext4 filesystem being mounted at /root/syzkaller.xXiHGh/134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.911074][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.015269][T25749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7003'. [ 476.115019][T25757] loop4: detected capacity change from 0 to 512 [ 476.151035][T25757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.163783][T25757] ext4 filesystem being mounted at /root/syzkaller.6yYS1V/357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.183405][T25757] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7007: corrupted inode contents [ 476.196925][T25757] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.7007: mark_inode_dirty error [ 476.213915][T25757] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7007: corrupted inode contents [ 476.216588][T25766] netlink: 'syz.2.7010': attribute type 10 has an invalid length. [ 476.227837][T25757] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.7007: mark_inode_dirty error [ 476.233838][T25766] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7010'. [ 476.255710][T25766] team0: entered promiscuous mode [ 476.260825][T25766] team_slave_0: entered promiscuous mode [ 476.266794][T25766] team_slave_1: entered promiscuous mode [ 476.272897][T25766] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.284528][T25757] Falling back ldisc for ptm0. [ 476.303366][T20554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.438360][T25779] loop4: detected capacity change from 0 to 2048 [ 476.463392][T25779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.479568][T25779] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7016: bg 0: block 136: padding at end of block bitmap is not set [ 476.560329][T20554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.730519][ T29] audit: type=1326 audit(2000000365.249:14333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25735 comm="syz.1.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701b6f8b99 code=0x7fc00000 [ 476.804312][T25800] loop4: detected capacity change from 0 to 512 [ 476.834986][T25800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.839225][T25803] netlink: 'syz.1.7025': attribute type 10 has an invalid length. [ 476.847815][T25800] ext4 filesystem being mounted at /root/syzkaller.6yYS1V/361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.855425][T25803] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7025'. [ 476.899500][T25800] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7024: corrupted inode contents [ 476.914694][T25803] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.921396][T25800] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.7024: mark_inode_dirty error [ 476.944026][T25802] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 476.985158][T25800] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7024: corrupted inode contents [ 477.012070][T25800] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.7024: mark_inode_dirty error [ 477.035832][T25800] Falling back ldisc for ptm1. [ 477.068700][T20554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.094361][T25813] loop3: detected capacity change from 0 to 512 [ 477.102367][T25813] EXT4-fs: Ignoring removed i_version option [ 477.108505][T25813] EXT4-fs: Ignoring removed nobh option [ 477.128507][T25813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 477.156421][T25813] EXT4-fs (loop3): 1 truncate cleaned up [ 477.164641][T25813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.234755][T25329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.313453][T25829] loop4: detected capacity change from 0 to 512 [ 477.324408][T25829] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 477.332407][T25829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 477.351312][T25829] EXT4-fs (loop4): orphan cleanup on readonly fs [ 477.359426][T25829] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 477.372673][T25838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.380536][T25838] IPv6: NLM_F_CREATE should be set when creating new route [ 477.383295][T25829] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 477.387938][T25838] IPv6: NLM_F_CREATE should be set when creating new route [ 477.400302][T25829] EXT4-fs (loop4): 1 truncate cleaned up [ 477.414200][T25829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 477.428880][T25829] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.7035: dx entry: limit 65535 != root limit 120 [ 477.441139][T25829] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.7035: Corrupt directory, running e2fsck is recommended [ 477.491136][T25838] hsr0: left promiscuous mode [ 477.550819][T25854] loop3: detected capacity change from 0 to 512 [ 477.568436][T25854] EXT4-fs: Ignoring removed i_version option [ 477.575252][T25854] EXT4-fs: Ignoring removed nobh option [ 477.581637][T25854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 477.600876][T25854] EXT4-fs (loop3): 1 truncate cleaned up [ 477.607655][T25854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.652501][T25329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.196656][ T29] audit: type=1326 audit(2000000366.587:14334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25828 comm="syz.4.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcd34fb99 code=0x7fc00000 [ 478.243272][T25829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.246060][T25901] loop3: detected capacity change from 0 to 512 [ 478.267315][T25901] EXT4-fs: Ignoring removed i_version option [ 478.273579][T25901] EXT4-fs: Ignoring removed nobh option [ 478.280457][T25901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 478.295673][T25901] EXT4-fs (loop3): 1 truncate cleaned up [ 478.307938][T25901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.338999][T25329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.406249][T25925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7067'. [ 478.528023][ T29] audit: type=1400 audit(2000000366.901:14335): avc: denied { write } for pid=25935 comm="syz.3.7070" name="/" dev="configfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 478.550417][ T29] audit: type=1400 audit(2000000366.901:14336): avc: denied { add_name } for pid=25935 comm="syz.3.7070" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 478.550451][ T29] audit: type=1400 audit(2000000366.901:14337): avc: denied { create } for pid=25935 comm="syz.3.7070" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 478.740514][T25958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7078'. [ 478.888796][T25980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7087'. [ 479.046871][T25992] Invalid ELF header magic: != ELF [ 479.104170][T25996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7093'. [ 479.519094][T26044] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 479.984838][T26089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=26089 comm=syz.2.7129 [ 480.031781][T26102] loop2: detected capacity change from 0 to 512 [ 480.042445][T26102] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.050400][T26102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 480.061310][T26102] System zones: 1-12 [ 480.065858][T26102] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.7133: casefold flag without casefold feature [ 480.081542][T26102] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.7133: couldn't read orphan inode 15 (err -117) [ 480.094037][T26102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.131529][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.222635][T26119] loop2: detected capacity change from 0 to 256 [ 480.405014][T26141] netlink: 'syz.4.7145': attribute type 10 has an invalid length. [ 480.412913][T26141] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7145'. [ 480.422439][T26141] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.438508][T26143] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 480.560846][T26155] loop2: detected capacity change from 0 to 512 [ 480.572628][T26155] ext4: Unknown parameter 'smackfshat' [ 480.791990][T26179] netlink: 'syz.3.7157': attribute type 10 has an invalid length. [ 480.800103][T26179] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7157'. [ 480.809188][T26179] team0: entered promiscuous mode [ 480.814520][T26179] team_slave_0: entered promiscuous mode [ 480.820509][T26179] team_slave_1: entered promiscuous mode [ 480.826619][T26179] bridge0: port 2(team0) entered blocking state [ 480.832973][T26179] bridge0: port 2(team0) entered disabled state [ 480.839798][T26179] team0: entered allmulticast mode [ 480.845026][T26179] team_slave_0: entered allmulticast mode [ 480.850921][T26179] team_slave_1: entered allmulticast mode [ 480.859323][T26179] bridge0: port 2(team0) entered blocking state [ 480.865750][T26179] bridge0: port 2(team0) entered forwarding state [ 481.170748][T26205] loop3: detected capacity change from 0 to 736 [ 481.190680][T26205] rock: directory entry would overflow storage [ 481.196913][T26205] rock: sig=0x5850, size=36, remaining=14 [ 481.355754][T26221] netlink: 'syz.1.7169': attribute type 10 has an invalid length. [ 481.363669][T26221] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7169'. [ 481.696425][T26248] netlink: 'syz.1.7180': attribute type 10 has an invalid length. [ 481.704366][T26248] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7180'. [ 481.824571][T26258] debugfs: Directory 'ptm1' with parent 'caif_serial' already present! [ 481.929225][T26267] loop4: detected capacity change from 0 to 512 [ 481.951322][T26267] EXT4-fs: Ignoring removed i_version option [ 481.957480][T26267] EXT4-fs: Ignoring removed nobh option [ 481.968417][T26267] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 481.981557][T26267] EXT4-fs (loop4): 1 truncate cleaned up [ 482.005002][T26267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.053917][T26274] random: crng reseeded on system resumption [ 482.187654][T20554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.299864][T26299] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 482.323824][T26295] loop4: detected capacity change from 0 to 512 [ 482.345438][T26295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.364201][T26295] ext4 filesystem being mounted at /root/syzkaller.6yYS1V/392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.384490][T26317] loop2: detected capacity change from 0 to 512 [ 482.392774][T26317] EXT4-fs: Ignoring removed i_version option [ 482.398852][T26317] EXT4-fs: Ignoring removed nobh option [ 482.405740][T26317] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 482.417831][T26295] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7191: corrupted inode contents [ 482.432452][T26317] EXT4-fs (loop2): 1 truncate cleaned up [ 482.442293][T26317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.460666][T26295] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.7191: mark_inode_dirty error [ 482.488295][T26295] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7191: corrupted inode contents [ 482.521655][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.538517][T26295] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.7191: mark_inode_dirty error [ 482.582256][T20554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.829525][T26343] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 482.937211][T26352] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 482.952252][T26347] netlink: 'syz.0.7212': attribute type 3 has an invalid length. [ 483.016749][T26361] loop4: detected capacity change from 0 to 512 [ 483.062650][T26361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.078446][T26361] ext4 filesystem being mounted at /root/syzkaller.6yYS1V/396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.106891][T26361] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7217: corrupted inode contents [ 483.121428][T26361] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.7217: mark_inode_dirty error [ 483.135296][T26361] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.7217: corrupted inode contents [ 483.153198][T26361] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.7217: mark_inode_dirty error [ 483.195709][T20554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.239755][T26378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7220'. [ 483.249298][T10083] IPVS: starting estimator thread 0... [ 483.255980][T26378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7220'. [ 483.345047][ T29] audit: type=1400 audit(2000000371.350:14338): avc: denied { nlmsg_write } for pid=26384 comm="syz.0.7223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 483.374688][T26379] IPVS: using max 2112 ests per chain, 105600 per kthread [ 483.409733][T26389] netlink: 'syz.0.7225': attribute type 4 has an invalid length. [ 483.420301][T26389] x_tables: duplicate underflow at hook 2 [ 483.570919][T26399] loop4: detected capacity change from 0 to 164 [ 483.584668][T26399] Unable to read rock-ridge attributes [ 483.592252][T26399] Unable to read rock-ridge attributes [ 483.601475][T26399] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 483.906974][T26413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7231'. [ 483.916683][T26414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7231'. [ 483.933510][ T29] audit: type=1400 audit(2000000371.895:14339): avc: denied { create } for pid=26416 comm="syz.1.7235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_selinux_socket permissive=1 [ 483.965241][ T29] audit: type=1400 audit(2000000371.913:14340): avc: denied { create } for pid=26416 comm="syz.1.7235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 484.103583][T26432] sctp: [Deprecated]: syz.2.7241 (pid 26432) Use of int in maxseg socket option. [ 484.103583][T26432] Use struct sctp_assoc_value instead [ 484.132328][T26435] netlink: 'syz.4.7242': attribute type 10 has an invalid length. [ 484.140353][T26435] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7242'. [ 484.237070][T26448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7246'. [ 484.246585][ T4893] IPVS: starting estimator thread 0... [ 484.249352][T26448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7246'. [ 484.322252][T26455] loop3: detected capacity change from 0 to 164 [ 484.346167][T26449] IPVS: using max 2208 ests per chain, 110400 per kthread [ 484.418474][T26459] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7248'. [ 484.599092][T26473] sctp: [Deprecated]: syz.3.7254 (pid 26473) Use of int in maxseg socket option. [ 484.599092][T26473] Use struct sctp_assoc_value instead [ 484.688026][ C0] vxcan0: j1939_tp_txtimer: 0xffff8881128ebe00: tx aborted with unknown reason: -2 [ 484.689629][T26479] syzkaller1: entered promiscuous mode [ 484.697454][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8881128eb800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 484.702869][T26479] syzkaller1: entered allmulticast mode [ 484.720307][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8881128ebe00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 485.270198][T26496] loop4: detected capacity change from 0 to 512 [ 485.277933][T26496] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 485.289964][T26496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 485.298056][T26496] System zones: 1-12 [ 485.302890][T26496] EXT4-fs (loop4): 1 truncate cleaned up [ 485.308844][T26496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.364333][T26496] loop4: detected capacity change from 512 to 64 [ 485.372008][ T29] audit: type=1400 audit(2000000373.224:14341): avc: denied { ioctl } for pid=26495 comm="syz.4.7260" path="/root/syzkaller.6yYS1V/405/file2/file1" dev="loop4" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.406216][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.419915][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.433652][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.447418][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.461138][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.475126][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.488836][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.502711][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.516472][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.530163][T20554] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 485.614474][T20554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.782684][T26511] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 485.917797][T19172] team0: left allmulticast mode [ 485.923143][T19172] team_slave_0: left allmulticast mode [ 485.928740][T19172] team_slave_1: left allmulticast mode [ 485.934458][T19172] bridge0: port 3(team0) entered disabled state [ 485.942389][T19172] bridge_slave_1: left allmulticast mode [ 485.948044][T19172] bridge_slave_1: left promiscuous mode [ 485.953821][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.962733][T19172] bridge_slave_0: left allmulticast mode [ 485.968395][T19172] bridge_slave_0: left promiscuous mode [ 485.974097][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.983123][T26545] Process accounting resumed [ 486.051951][ T29] audit: type=1326 audit(2000000373.851:14342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26540 comm="syz.0.7273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0355488b99 code=0x0 [ 486.462419][T19172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.472261][T19172] bond0 (unregistering): Released all slaves [ 486.490188][T26522] chnl_net:caif_netlink_parms(): no params data found [ 486.532985][T26522] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.540221][T26522] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.549192][T26522] bridge_slave_0: entered allmulticast mode [ 486.555843][T26522] bridge_slave_0: entered promiscuous mode [ 486.563937][T26522] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.571039][T26522] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.578338][T26522] bridge_slave_1: entered allmulticast mode [ 486.584861][T26522] bridge_slave_1: entered promiscuous mode [ 486.609105][T26522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.622186][T26522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.624060][T26563] debugfs: Directory 'ptm1' with parent 'caif_serial' already present! [ 486.655674][T26522] team0: Port device team_slave_0 added [ 486.665201][T19172] hsr_slave_0: left promiscuous mode [ 486.671207][T19172] hsr_slave_1: left promiscuous mode [ 486.678320][T19172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.686545][T19172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.751020][T19172] team_slave_1 (unregistering): left promiscuous mode [ 486.759801][T19172] team0 (unregistering): Port device team_slave_1 removed [ 486.770572][T19172] team_slave_0 (unregistering): left promiscuous mode [ 486.778144][T19172] team0 (unregistering): Port device team_slave_0 removed [ 486.821667][T26522] team0: Port device team_slave_1 added [ 486.842243][T26522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.844574][T26570] 9pnet_fd: Insufficient options for proto=fd [ 486.849392][T26522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.881444][T26522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.892274][ T29] audit: type=1400 audit(2000000374.580:14343): avc: denied { mounton } for pid=26569 comm="syz.2.7281" path="/root/syzkaller.xXiHGh/184/file0" dev="sda1" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 486.898414][T26522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.924522][T26522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.950497][T26522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.961398][ T29] audit: type=1326 audit(2000000374.682:14344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.1.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701b6f8b99 code=0x7fc00000 [ 487.002922][T26522] hsr_slave_0: entered promiscuous mode [ 487.010223][T26522] hsr_slave_1: entered promiscuous mode [ 487.017386][T26522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.031773][T26522] Cannot create hsr debugfs directory [ 487.228273][T19172] IPVS: stop unused estimator thread 0... [ 487.245349][T26589] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 487.438325][T26522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.447194][T26522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.456257][T26522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.464950][T26522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.504602][T26522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.518675][T26522] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.532526][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.539640][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.548835][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.555910][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.622230][T26522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.654128][T26620] SELinux: Context ¿øpŽt8+‹ÌÔÈç´ JJ´÷者,…T˜üêË“6b?YŠ¹~ á(F‘aè¸_>?|Ì!鶠+>j`+<Åˉ+Õ,&SPt¿y/èbòÏéŒépw³fÜÌLÎÜXÌS›²|RÒ—EÔ%WÁT›&@:#c?Ìç¤Îñ€%(|µ›(3 [ 487.654128][T26620] Ä/h[+ü3nña¾Ò€8Ó•ÎB'W ÆÂHÐÉD)¿…>¨±÷Ô\6‘íò1EÊòЫëwš+ is not valid (left unmapped). [ 487.684282][T26620] SELinux: Context —“Fø6´ÝBî —nwH‚qƒ2Oó]ݓߎxŸ„<ÙIbzOzqZ”.š is not valid (left unmapped). [ 487.697830][T26620] SELinux: Context ĉ²PÉKsI²Œ/‡xºÍýñƒc«ÔzfãªD¡$á5Lûû>gÚÖŠð‚¿"¾å£Ñ«J{ñ…E™Ø [ 487.697830][T26620] uÒÁ·Ì1Û’Ę)INSŸ‡Äxâ&2WC˜ä­HõŃù»ôŽ ö-{áßPå³[_úa8týÛ™¡“R “Ð;TtsÞîÌÅÚ"­×–ß_X‘æ w´RV³,ÁÒË7å×3Œ`ÚƒŸZWõ0È®¶:š]A¿=ãæ;ýæêl¶+Ô«^´«YwW— 5#Úwq6“®Ç¨aÈâ:Å"fåܳP¹ˆËiK_€~™öBÿ`Íߺ8ψ¼±Š is not valid (left unmapped). [ 487.733119][T26620] SELinux: Context lX“­ƒM.Bဠ^ôx…0Í_Þ“w›èH,y[êùñ4Nç­wWÛ9q’3õW is not valid (left unmapped). [ 487.758472][T26522] veth0_vlan: entered promiscuous mode [ 487.768551][T26522] veth1_vlan: entered promiscuous mode [ 487.769329][T26620] hub 9-0:1.0: USB hub found [ 487.778783][T26620] hub 9-0:1.0: 8 ports detected [ 487.786597][ T29] audit: type=1400 audit(2000000375.448:14345): avc: denied { create } for pid=26618 comm="syz.2.7293" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=056C5893AD834D032E4204E180095EF4788530CD5FDE93771C9BE8482C795BEAF9F1344EE7AD7757DB39711C923310F557 [ 487.792306][T26522] veth0_macvtap: entered promiscuous mode [ 487.826775][T26522] veth1_macvtap: entered promiscuous mode [ 487.827661][ T29] audit: type=1400 audit(2000000375.494:14346): avc: denied { mounton } for pid=26618 comm="syz.2.7293" path="/root/syzkaller.xXiHGh/185/file0" dev="sda1" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=056C5893AD834D032E4204E180095EF4788530CD5FDE93771C9BE8482C795BEAF9F1344EE7AD7757DB39711C923310F557 [ 487.839486][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.877180][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.887060][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.897524][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.907395][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.917842][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.923918][ T29] audit: type=1400 audit(2000000375.568:14347): avc: denied { rmdir } for pid=23289 comm="syz-executor" name="file0" dev="sda1" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=056C5893AD834D032E4204E180095EF4788530CD5FDE93771C9BE8482C795BEAF9F1344EE7AD7757DB39711C923310F557 [ 487.927662][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.970227][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.980275][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.990729][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.000687][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.011250][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.023442][T26522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.031994][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.042540][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.052443][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.063029][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.072916][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.083382][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.093420][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.103895][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.113744][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.124276][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.134217][T26522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.144750][T26522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.156245][T26522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.185590][T26522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.194478][T26522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.203269][T26522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.211994][T26522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.446902][T26663] netlink: 'syz.0.7303': attribute type 10 has an invalid length. [ 488.455624][T26663] hsr0: entered promiscuous mode [ 488.460929][T26663] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.473201][T26663] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 488.483947][T26663] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 488.490875][T26665] loop2: detected capacity change from 0 to 512 [ 488.496374][T26663] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 488.533350][T26665] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 488.552504][T26665] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7301: bg 0: block 64: padding at end of block bitmap is not set [ 488.567207][T26665] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.7301: Failed to acquire dquot type 0 [ 488.579963][T26665] EXT4-fs (loop2): 1 truncate cleaned up [ 488.589701][T26665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.606807][T26665] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.7301: Failed to acquire dquot type 0 [ 488.794153][T26684] loop4: detected capacity change from 0 to 512 [ 488.803997][T26684] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 488.811982][T26684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 488.820146][T26684] EXT4-fs (loop4): orphan cleanup on readonly fs [ 488.829471][T26684] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 488.840159][T26684] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 488.851253][T26684] EXT4-fs (loop4): 1 truncate cleaned up [ 488.859128][T26684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 488.874274][T26684] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.7309: dx entry: limit 65535 != root limit 120 [ 488.886554][T26684] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.7309: Corrupt directory, running e2fsck is recommended [ 489.270028][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.339909][T26704] __nla_validate_parse: 5 callbacks suppressed [ 489.339929][T26704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7317'. [ 489.474857][T26712] netlink: 'syz.1.7320': attribute type 10 has an invalid length. [ 489.482850][T26712] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7320'. [ 489.533559][T26718] €Â: renamed from vlan1 [ 489.650707][T26728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7328'. [ 489.691002][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 489.691017][ T29] audit: type=1326 audit(2000000377.211:14349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26683 comm="syz.4.7309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48739fb99 code=0x7fc00000 [ 489.733142][T26684] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.746968][T26734] netlink: 'syz.1.7330': attribute type 10 has an invalid length. [ 489.754984][T26734] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 489.767153][T26734] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 489.773141][T26740] loop2: detected capacity change from 0 to 512 [ 489.779461][T26734] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 489.792195][T26740] EXT4-fs: Ignoring removed i_version option [ 489.795851][T26734] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 489.801806][T26740] EXT4-fs: Ignoring removed nobh option [ 489.815086][T26740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 489.827860][T26740] EXT4-fs (loop2): 1 truncate cleaned up [ 489.836415][T26740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.861532][T26743] netlink: 'syz.4.7332': attribute type 10 has an invalid length. [ 489.869410][T26743] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7332'. [ 489.878370][T26743] team0: entered promiscuous mode [ 489.883628][T26743] team_slave_0: entered promiscuous mode [ 489.889471][T26743] team_slave_1: entered promiscuous mode [ 489.895978][T26743] bridge0: port 3(team0) entered blocking state [ 489.902560][T26743] bridge0: port 3(team0) entered disabled state [ 489.909077][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.909666][T26743] team0: entered allmulticast mode [ 489.923326][T26743] team_slave_0: entered allmulticast mode [ 489.929167][T26743] team_slave_1: entered allmulticast mode [ 489.939825][T26743] bridge0: port 3(team0) entered blocking state [ 489.946160][T26743] bridge0: port 3(team0) entered forwarding state [ 490.051147][T26753] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7336'. [ 490.060237][T26753] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7336'. [ 490.116356][T26764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7339'. [ 490.132822][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7338'. [ 490.142058][ T29] audit: type=1400 audit(2000000377.617:14350): avc: denied { accept } for pid=26763 comm="syz.1.7339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 490.336460][T26784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7345'. [ 490.412959][T26797] loop4: detected capacity change from 0 to 512 [ 490.421896][T26797] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 490.432374][T26797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 490.440480][T26797] System zones: 1-12 [ 490.444784][T26797] EXT4-fs (loop4): orphan cleanup on readonly fs [ 490.451301][T26797] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.7348: Inode bitmap for bg 0 marked uninitialized [ 490.464535][T26797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 490.480510][T26797] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 5: comm syz.4.7348: lblock 0 mapped to illegal pblock 5 (length 1) [ 490.497483][T26797] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz.4.7348: error -117 reading directory block [ 490.518071][T26797] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 490.528347][T26797] EXT4-fs error (device loop4): __ext4_remount:6503: comm syz.4.7348: Abort forced by user [ 490.538924][T26797] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 490.557366][T26522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.719470][T26816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7355'. [ 491.172087][ T29] audit: type=1326 audit(2000000378.577:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26775 comm="syz.1.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701b6f8b99 code=0x7fc00000 [ 491.238964][T26848] loop2: detected capacity change from 0 to 512 [ 491.251024][T26851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 55366 - 0 [ 491.260208][T26851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 55366 - 0 [ 491.269390][T26851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 55366 - 0 [ 491.278829][T26851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 55366 - 0 [ 491.291480][T26851] geneve2: entered allmulticast mode [ 491.299105][T26848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.312062][T26848] ext4 filesystem being mounted at /root/syzkaller.xXiHGh/198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.316507][T26854] vhci_hcd: invalid port number 16 [ 491.333218][T26848] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.7368: corrupted inode contents [ 491.348189][T26848] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.7368: mark_inode_dirty error [ 491.361805][T26848] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.7368: corrupted inode contents [ 491.376467][T26848] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.7368: mark_inode_dirty error [ 491.404019][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.494280][T26861] IPVS: Error connecting to the multicast addr [ 491.517950][T26861] loop2: detected capacity change from 0 to 512 [ 491.540036][T26861] EXT4-fs: Cannot specify journal on remount [ 491.631548][T26868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.644682][T26870] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 491.737320][T26880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26880 comm=syz.1.7380 [ 492.141312][ T29] audit: type=1326 audit(2000000379.472:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26904 comm="syz.0.7388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0355488b99 code=0x0 [ 492.717341][T26916] loop2: detected capacity change from 0 to 512 [ 492.729772][T26916] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7391: bg 0: block 393: padding at end of block bitmap is not set [ 492.745590][T26916] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 492.758193][T26916] EXT4-fs (loop2): 2 truncates cleaned up [ 492.767204][T26916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.826725][T26916] netlink: 'syz.2.7391': attribute type 10 has an invalid length. [ 492.834784][T26916] hsr0: entered promiscuous mode [ 492.839825][T26916] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 492.851980][T26916] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 492.862230][T26916] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 492.874744][T26916] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 492.923997][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.037344][T26936] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 493.061765][T26940] loop2: detected capacity change from 0 to 512 [ 493.079471][T26940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.092484][T26940] ext4 filesystem being mounted at /root/syzkaller.xXiHGh/208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.102167][T26936] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 493.113221][T26936] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 493.198617][T26951] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #19: comm syz.2.7399: corrupted inode contents [ 493.211365][T26951] EXT4-fs (loop2): Remounting filesystem read-only [ 493.218383][T26951] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 493.236919][T26951] No such timeout policy "syz0" [ 493.655801][T26965] random: crng reseeded on system resumption [ 494.012188][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.259074][T27002] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 494.352547][T27012] loop4: detected capacity change from 0 to 512 [ 494.369638][T27012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.386347][T26985] loop2: detected capacity change from 0 to 128 [ 494.394271][T27012] ext4 filesystem being mounted at /root/syzkaller.01cVA7/33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.467029][T27012] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.7424: corrupted inode contents [ 494.485504][T27012] EXT4-fs (loop4): Remounting filesystem read-only [ 494.496112][T27012] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -5) [ 494.502599][T27026] IPVS: Error connecting to the multicast addr [ 494.514934][T27012] No such timeout policy "syz0" [ 494.550200][T26522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.825541][T27065] loop2: detected capacity change from 0 to 1024 [ 494.864082][T27065] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 495.066340][T27084] loop2: detected capacity change from 0 to 512 [ 495.094004][T27088] __nla_validate_parse: 11 callbacks suppressed [ 495.094024][T27088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7449'. [ 495.121715][T27089] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7451'. [ 495.669226][T27126] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7465'. [ 495.770513][T27138] ipt_ECN: cannot use operation on non-tcp rule [ 495.797135][T27150] loop2: detected capacity change from 0 to 256 [ 495.902240][T27140] chnl_net:caif_netlink_parms(): no params data found [ 495.948414][T27140] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.956459][T27140] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.964307][T27140] bridge_slave_0: entered allmulticast mode [ 495.971545][T27140] bridge_slave_0: entered promiscuous mode [ 495.992832][T27140] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.000354][T27140] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.007655][T27140] bridge_slave_1: entered allmulticast mode [ 496.014309][T27140] bridge_slave_1: entered promiscuous mode [ 496.033889][T27140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.046377][T27140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.073095][T27140] team0: Port device team_slave_0 added [ 496.080685][T27140] team0: Port device team_slave_1 added [ 496.120654][T27140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.127890][T27140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.154371][T27140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.166737][T27140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.173760][T27140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.199941][T27140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.248625][T27140] hsr_slave_0: entered promiscuous mode [ 496.263117][T27140] hsr_slave_1: entered promiscuous mode [ 496.274239][T27140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.291907][T27140] Cannot create hsr debugfs directory [ 496.390281][T27176] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7475'. [ 496.414621][T27140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.468189][T27180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7476'. [ 496.527645][T27140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.591412][T27140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.649087][T27140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.728669][T27140] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 496.738845][T27140] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 496.750163][T27140] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 496.763415][T27140] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 496.831967][T27140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.868918][T27140] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.891636][T18945] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.898820][T18945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.912637][T18945] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.919853][T18945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.037116][T27140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.164664][T27140] veth0_vlan: entered promiscuous mode [ 497.178641][T27140] veth1_vlan: entered promiscuous mode [ 497.207390][T27140] veth0_macvtap: entered promiscuous mode [ 497.216492][T27140] veth1_macvtap: entered promiscuous mode [ 497.231309][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.241890][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.251807][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.262473][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.272424][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.282987][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.292838][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.303269][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.313133][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.323667][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.333628][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.344185][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.354060][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.364613][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.377498][T27140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.392624][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.403225][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.413179][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.423782][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.433963][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.444421][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.454281][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.464842][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.474794][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.485307][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.495320][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.505953][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.515957][T27140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.526460][T27140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.541444][T27140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.555387][T27140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.564259][T27140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.572999][T27140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.581801][T27140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.666748][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7491'. [ 497.740970][T27251] loop4: detected capacity change from 0 to 512 [ 497.767442][T27253] loop3: detected capacity change from 0 to 2048 [ 497.771036][T27251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7492'. [ 497.813674][T27253] loop3: p1 < > p3 [ 497.818319][T27253] loop3: p3 size 134217728 extends beyond EOD, truncated [ 497.840002][T27253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 497.841820][T27257] block device autoloading is deprecated and will be removed. [ 497.850048][T27253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.985534][T27268] loop4: detected capacity change from 0 to 1024 [ 497.999939][T27268] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 498.009698][T27268] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 498.025244][T27268] EXT4-fs (loop4): invalid journal inode [ 498.034110][T27268] EXT4-fs (loop4): can't get journal size [ 498.044668][T27268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 498.060124][T27268] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.7501: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 498.132239][T26522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.305040][ T29] audit: type=1326 audit(2000000384.359:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27289 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 498.393510][ T29] audit: type=1326 audit(2000000384.359:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27289 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 498.393609][T27297] syzkaller0: entered promiscuous mode [ 498.393627][T27297] syzkaller0: entered allmulticast mode [ 498.547944][T27304] netlink: 'syz.0.7513': attribute type 10 has an invalid length. [ 498.555881][T27304] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7513'. [ 498.569076][T27304] team0: entered promiscuous mode [ 498.569163][T27304] team_slave_0: entered promiscuous mode [ 498.569227][T27304] team_slave_1: entered promiscuous mode [ 498.570041][T27304] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.570538][T27304] bridge0: port 3(team0) entered blocking state [ 498.600176][T27304] bridge0: port 3(team0) entered disabled state [ 498.600688][T27304] team0: entered allmulticast mode [ 498.600753][T27304] team_slave_0: entered allmulticast mode [ 498.600771][T27304] team_slave_1: entered allmulticast mode [ 498.683587][T27308] loop2: detected capacity change from 0 to 2048 [ 498.724137][T27308] loop2: p1 < > p3 [ 498.731768][T27308] loop2: p3 size 134217728 extends beyond EOD, truncated [ 498.760285][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 498.770255][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.961465][T27331] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 498.974204][T27345] netlink: 'syz.2.7524': attribute type 10 has an invalid length. [ 498.982148][T27345] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7524'. [ 499.000822][T27337] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 499.051501][ T29] audit: type=1326 audit(2000000385.042:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27349 comm="syz.4.7528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48739fb99 code=0x7ffc0000 [ 499.065092][T27355] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 499.075776][ T29] audit: type=1326 audit(2000000385.042:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27349 comm="syz.4.7528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48739fb99 code=0x7ffc0000 [ 499.110356][ T29] audit: type=1326 audit(2000000385.042:14357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27349 comm="syz.4.7528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc48739fb99 code=0x7ffc0000 [ 499.125472][T27353] netlink: zone id is out of range [ 499.134039][ T29] audit: type=1326 audit(2000000385.042:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27349 comm="syz.4.7528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48739fb99 code=0x7ffc0000 [ 499.163320][ T29] audit: type=1326 audit(2000000385.042:14359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27349 comm="syz.4.7528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48739fb99 code=0x7ffc0000 [ 499.168219][T27353] netlink: set zone limit has 8 unknown bytes [ 499.186914][ T29] audit: type=1326 audit(2000000385.061:14360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27349 comm="syz.4.7528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc48739fb99 code=0x7ffc0000 [ 499.217160][ T29] audit: type=1326 audit(2000000385.061:14361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27349 comm="syz.4.7528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48739fb99 code=0x7ffc0000 [ 499.241014][ T29] audit: type=1326 audit(2000000385.061:14362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27349 comm="syz.4.7528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48739fb99 code=0x7ffc0000 [ 499.324473][T27372] loop2: detected capacity change from 0 to 512 [ 499.336414][T27372] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 499.344514][T27372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 499.353002][T27372] EXT4-fs (loop2): orphan cleanup on readonly fs [ 499.359673][T27372] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 499.370324][T27372] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 499.380980][T27372] EXT4-fs (loop2): 1 truncate cleaned up [ 499.387352][T27372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 499.401463][T27372] EXT4-fs warning (device loop2): dx_probe:892: inode #2: comm syz.2.7533: dx entry: limit 65535 != root limit 120 [ 499.413749][T27372] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.7533: Corrupt directory, running e2fsck is recommended [ 499.498399][T27382] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7535'. [ 499.733736][T27390] loop4: detected capacity change from 0 to 2048 [ 499.757388][T27390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.904405][T27404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=27404 comm=syz.0.7542 [ 499.962216][T27402] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 500.042423][T26522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.150053][T27418] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 500.150053][T27418] The task syz.0.7543 (27418) triggered the difference, watch for misbehavior. [ 500.369579][T27436] loop3: detected capacity change from 0 to 128 [ 500.726893][T27451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27451 comm=syz.4.7553 [ 500.907543][T27457] debugfs: Directory 'ptm1' with parent 'caif_serial' already present! [ 501.486703][T27501] __nla_validate_parse: 3 callbacks suppressed [ 501.486761][T27501] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7567'. [ 501.536145][T27514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27514 comm=syz.0.7571 [ 501.563597][T27516] loop4: detected capacity change from 0 to 132 [ 501.637927][T27522] can: request_module (can-proto-0) failed. [ 501.646252][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.653732][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.661368][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.668767][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.676277][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.683771][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.691264][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.698693][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.706172][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.713604][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.721019][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.728488][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.736062][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.743488][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.750982][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.758486][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.765984][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.773531][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.780969][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.788380][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.795809][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.803289][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.810793][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.818208][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.825646][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.833063][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.840531][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.848044][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.855540][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.862944][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.870555][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.878141][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.885710][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.893584][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.901227][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.908740][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.916197][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.924166][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.932550][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.940365][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.947991][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.955706][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.963272][T18945] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 501.973057][T18945] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 502.288680][T18944] kernel write not supported for file /null (pid: 18944 comm: kworker/1:12) [ 502.568358][T27577] loop4: detected capacity change from 0 to 2048 [ 502.575923][T27372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.611079][T27577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.658502][T26522] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 502.675122][T26522] EXT4-fs error (device loop4): __ext4_iget:4906: inode #13: block 127754: comm syz-executor: invalid block [ 502.700770][T26522] EXT4-fs error (device loop4): __ext4_iget:4906: inode #13: block 127754: comm syz-executor: invalid block [ 502.709714][T27594] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 502.893123][T27605] netlink: 'syz.1.7605': attribute type 10 has an invalid length. [ 502.901404][T27605] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 502.913748][T27605] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 502.928571][T27605] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 502.941147][T27605] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 503.047078][T26522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.063441][T19173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.166756][T19173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.234664][T19173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.342917][T19173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.444453][T19173] team0: left allmulticast mode [ 503.449415][T19173] team_slave_0: left allmulticast mode [ 503.454952][T19173] team_slave_1: left allmulticast mode [ 503.460584][T19173] bridge0: port 3(team0) entered disabled state [ 503.474881][T19173] bridge_slave_1: left allmulticast mode [ 503.480680][T19173] bridge_slave_1: left promiscuous mode [ 503.486456][T19173] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.500957][T19173] bridge_slave_0: left allmulticast mode [ 503.506644][T19173] bridge_slave_0: left promiscuous mode [ 503.512455][T19173] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.710108][T19173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.716039][T27643] Cannot find add_set index 0 as target [ 503.740231][T19173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.759405][T19173] bond0 (unregistering): Released all slaves [ 503.843695][T27650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.854244][T27650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.864189][T27650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.874715][T27650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.884596][T27650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.895090][T27650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.904957][T27650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.915437][T27650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.925382][T27650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.935913][T27650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.945806][T27650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.956341][T27650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.966231][T27650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.976695][T27650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.986640][T27650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.997200][T27650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.076199][T19173] hsr_slave_0: left promiscuous mode [ 504.107343][T19173] hsr_slave_1: left promiscuous mode [ 504.119328][T19173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.126982][T19173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.137245][T19173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.144989][T19173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.159569][T19173] veth1_macvtap: left promiscuous mode [ 504.165262][T19173] veth0_macvtap: left promiscuous mode [ 504.170894][T19173] veth1_vlan: left promiscuous mode [ 504.176213][T19173] veth0_vlan: left promiscuous mode [ 504.347944][T19173] team_slave_1 (unregistering): left promiscuous mode [ 504.355728][T19173] team0 (unregistering): Port device team_slave_1 removed [ 504.372140][T19173] team_slave_0 (unregistering): left promiscuous mode [ 504.400128][T19173] team0 (unregistering): Port device team_slave_0 removed [ 504.505355][T27678] random: crng reseeded on system resumption [ 504.513735][T27619] chnl_net:caif_netlink_parms(): no params data found [ 504.608291][T27619] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.615502][T27619] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.631922][T27619] bridge_slave_0: entered allmulticast mode [ 504.631933][T27689] loop2: detected capacity change from 0 to 256 [ 504.632641][T27689] FAT-fs (loop2): Unrecognized mount option "." or missing value [ 504.638822][T27619] bridge_slave_0: entered promiscuous mode [ 504.659436][T27619] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.666646][T27619] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.674973][T27619] bridge_slave_1: entered allmulticast mode [ 504.681986][T27619] bridge_slave_1: entered promiscuous mode [ 504.719358][T27619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.751628][T27619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.792983][T27619] team0: Port device team_slave_0 added [ 504.800152][T27619] team0: Port device team_slave_1 added [ 504.821994][T27619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.829063][T27619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.835034][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 504.835051][ T29] audit: type=1400 audit(2000000390.386:14406): avc: denied { read } for pid=27696 comm="syz.1.7630" dev="sockfs" ino=124035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 504.855025][T27619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.859586][T27619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.900518][T27619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.926558][T27619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.972339][T27619] hsr_slave_0: entered promiscuous mode [ 504.978622][T27619] hsr_slave_1: entered promiscuous mode [ 504.984770][T27619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.992447][T27619] Cannot create hsr debugfs directory [ 505.322014][T27619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 505.335051][T27619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 505.344914][T27619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 505.357937][T27619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 505.409755][T27619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.424417][T27619] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.440042][T18945] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.447258][T18945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.474334][T18945] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.481520][T18945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.589171][T27619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.725842][T27733] random: crng reseeded on system resumption [ 505.857280][T27619] veth0_vlan: entered promiscuous mode [ 505.866769][T27749] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 505.892066][T27619] veth1_vlan: entered promiscuous mode [ 505.915258][T27619] veth0_macvtap: entered promiscuous mode [ 505.923802][T27619] veth1_macvtap: entered promiscuous mode [ 505.944439][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.955007][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.964966][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.975467][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.985418][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.995966][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.006143][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.016901][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.026773][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.037235][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.037373][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.037434][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.037453][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.037466][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.039232][T27619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.040426][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.040443][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.040454][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.040538][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.040551][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.040564][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.040575][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.040599][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.040613][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.040629][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.040654][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.040668][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.040680][T27619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.040750][T27619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.041935][T27619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.048204][T27619] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.048258][T27619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.048293][T27619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.048339][T27619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.289978][T27783] netlink: 'syz.4.7645': attribute type 10 has an invalid length. [ 506.289998][T27783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7645'. [ 506.290452][T27783] bridge0: port 3(vlan0) entered blocking state [ 506.290574][T27783] bridge0: port 3(vlan0) entered disabled state [ 506.290762][T27783] vlan0: entered allmulticast mode [ 506.290776][T27783] veth0_vlan: entered allmulticast mode [ 506.291341][T27783] vlan0: entered promiscuous mode [ 506.291739][T27783] bridge0: port 3(vlan0) entered blocking state [ 506.291779][T27783] bridge0: port 3(vlan0) entered forwarding state [ 506.518754][T27811] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 506.592720][T27817] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7651'. [ 506.626756][T27823] loop4: detected capacity change from 0 to 1024 [ 506.634372][T27823] ext4: Bad value for 'max_batch_time' [ 506.719450][T27840] netlink: 'syz.4.7657': attribute type 1 has an invalid length. [ 506.840663][T27858] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7663'. [ 507.006318][T27875] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7665'. [ 507.167755][T27901] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7674'. [ 507.274113][T27912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7678'. [ 507.307877][T27912] syzkaller0: entered promiscuous mode [ 507.429025][T27936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7686'. [ 507.467831][T27939] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7687'. [ 507.708370][ T29] audit: type=1326 audit(2000000393.035:14407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.735493][ T29] audit: type=1326 audit(2000000393.035:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.759349][ T29] audit: type=1326 audit(2000000393.035:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.759445][ T29] audit: type=1326 audit(2000000393.035:14410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.759491][ T29] audit: type=1326 audit(2000000393.035:14411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.759524][ T29] audit: type=1326 audit(2000000393.035:14412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.759552][ T29] audit: type=1326 audit(2000000393.035:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.759629][ T29] audit: type=1326 audit(2000000393.035:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.759687][ T29] audit: type=1326 audit(2000000393.035:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27961 comm="syz.3.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x7ffc0000 [ 507.928154][T27985] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7694'. [ 507.967912][T27986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7696'. [ 508.022028][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7697'. [ 508.022048][T27991] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 508.142606][T27997] loop4: detected capacity change from 0 to 8192 [ 508.176989][T27999] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7700'. [ 508.192672][T27997] loop4: p1 p2 p3 p4 [ 508.196807][T27997] loop4: p1 size 108922248 extends beyond EOD, truncated [ 508.211604][T27997] loop4: p2 start 861536256 is beyond EOD, truncated [ 508.218406][T27997] loop4: p3 start 851968 is beyond EOD, truncated [ 508.224855][T27997] loop4: p4 size 65536 extends beyond EOD, truncated [ 508.455199][T28024] vlan2: entered promiscuous mode [ 508.637169][T28035] loop4: detected capacity change from 0 to 512 [ 508.658135][T28030] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7711'. [ 508.674511][T28035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.687932][T28035] ext4 filesystem being mounted at /root/syzkaller.UtMiwj/16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.718676][T28035] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz.4.7713: corrupted inode contents [ 508.737842][T28035] EXT4-fs (loop4): Remounting filesystem read-only [ 508.745268][T28035] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -5) [ 508.814329][T27619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.449341][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.459847][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.469680][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.480185][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.490058][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.500565][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.510501][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.521065][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.531011][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.541584][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.551490][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.561980][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.571894][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.582369][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.592245][T28081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.602749][T28081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.613778][T28082] xfrm0: entered allmulticast mode [ 509.772988][T28093] loop2: detected capacity change from 0 to 512 [ 509.810063][T28093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.831744][T28093] ext4 filesystem being mounted at /root/syzkaller.xXiHGh/261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.878363][T28093] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #19: comm syz.2.7728: corrupted inode contents [ 509.895900][T28093] EXT4-fs (loop2): Remounting filesystem read-only [ 509.918609][T28093] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -5) [ 510.017909][T23289] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.258092][T28140] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 510.266014][T28140] team0: Device ipvlan2 failed to register rx_handler [ 510.563391][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 510.563409][ T29] audit: type=1326 audit(2000000395.666:14500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.596275][T28177] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 510.596827][ T29] audit: type=1326 audit(2000000395.666:14501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.627300][ T29] audit: type=1326 audit(2000000395.666:14502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.650915][ T29] audit: type=1326 audit(2000000395.666:14503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.674643][ T29] audit: type=1326 audit(2000000395.666:14504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.698268][ T29] audit: type=1326 audit(2000000395.666:14505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.698303][ T29] audit: type=1326 audit(2000000395.666:14506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.698341][ T29] audit: type=1326 audit(2000000395.666:14507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.769216][ T29] audit: type=1326 audit(2000000395.666:14508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.769251][ T29] audit: type=1326 audit(2000000395.666:14509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28167 comm="syz.4.7749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7febaf99db99 code=0x7ffc0000 [ 510.879352][T28184] loop2: detected capacity change from 0 to 512 [ 511.116742][T28194] loop3: detected capacity change from 0 to 512 [ 511.151081][T28194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.169778][T28199] netlink: 'syz.0.7757': attribute type 10 has an invalid length. [ 511.174609][T28194] ext4 filesystem being mounted at /root/syzkaller.OTcQiW/50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.234934][T28194] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #19: comm syz.3.7756: corrupted inode contents [ 511.270398][T28194] EXT4-fs (loop3): Remounting filesystem read-only [ 511.277100][T28194] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -5) [ 511.316638][T27140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.548713][T28234] netlink: 'syz.4.7768': attribute type 10 has an invalid length. [ 511.556825][T28234] team0: entered promiscuous mode [ 511.561989][T28234] team_slave_0: entered promiscuous mode [ 511.567880][T28234] team_slave_1: entered promiscuous mode [ 511.577458][T28234] bridge0: port 4(team0) entered blocking state [ 511.583991][T28234] bridge0: port 4(team0) entered disabled state [ 511.590782][T28234] team0: entered allmulticast mode [ 511.595992][T28234] team_slave_0: entered allmulticast mode [ 511.601752][T28234] team_slave_1: entered allmulticast mode [ 511.635605][T28234] bridge0: port 4(team0) entered blocking state [ 511.641954][T28234] bridge0: port 4(team0) entered forwarding state [ 511.892468][T28244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=28244 comm=syz.1.7771 [ 512.467397][T28254] loop3: detected capacity change from 0 to 512 [ 512.517638][T28254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.542147][T28254] ext4 filesystem being mounted at /root/syzkaller.OTcQiW/53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.576536][T28254] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #19: comm syz.3.7774: corrupted inode contents [ 512.619335][T28254] EXT4-fs (loop3): Remounting filesystem read-only [ 512.633842][T28254] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -5) [ 512.721200][T27140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.779995][T28272] netlink: 'syz.4.7780': attribute type 10 has an invalid length. [ 512.787912][T28272] __nla_validate_parse: 5 callbacks suppressed [ 512.788002][T28272] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7780'. [ 512.805335][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7779'. [ 512.859797][T28274] loop3: detected capacity change from 0 to 512 [ 512.872786][T28274] EXT4-fs: Ignoring removed nobh option [ 512.883864][T28279] random: crng reseeded on system resumption [ 512.892936][T28274] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 512.901620][T28274] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #13: comm syz.3.7778: casefold flag without casefold feature [ 512.967002][T28274] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.7778: couldn't read orphan inode 13 (err -117) [ 512.993917][T28274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.061553][T27140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.201225][T28319] netlink: 'syz.3.7794': attribute type 10 has an invalid length. [ 513.209187][T28319] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7794'. [ 513.218134][T28319] team0: entered promiscuous mode [ 513.223233][T28319] team_slave_0: entered promiscuous mode [ 513.228933][T28319] team_slave_1: entered promiscuous mode [ 513.240124][T28319] bridge0: port 3(team0) entered blocking state [ 513.246496][T28319] bridge0: port 3(team0) entered disabled state [ 513.256094][T28319] team0: entered allmulticast mode [ 513.261308][T28319] team_slave_0: entered allmulticast mode [ 513.267328][T28319] team_slave_1: entered allmulticast mode [ 513.277723][T28319] bridge0: port 3(team0) entered blocking state [ 513.284117][T28319] bridge0: port 3(team0) entered forwarding state [ 513.310693][T28328] IPVS: Error connecting to the multicast addr [ 513.320264][T28328] IPVS: Error connecting to the multicast addr [ 513.321494][T28331] loop3: detected capacity change from 0 to 512 [ 513.414865][T28348] netlink: 'syz.2.7800': attribute type 13 has an invalid length. [ 513.422722][T28348] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7800'. [ 513.449732][T28348] erspan0: refused to change device tx_queue_len [ 513.456215][T28348] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 513.474572][T28361] loop3: detected capacity change from 0 to 512 [ 513.486188][T28348] loop2: detected capacity change from 0 to 2048 [ 513.555713][T28348] loop2: p1 < > p4 [ 513.560238][T28348] loop2: p4 size 8388608 extends beyond EOD, truncated [ 513.599369][T28381] syzkaller1: entered promiscuous mode [ 513.604886][T28381] syzkaller1: entered allmulticast mode [ 513.610620][T28348] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 513.621542][T28348] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 513.631544][T28348] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.641145][T28348] buffer_io_error: 6 callbacks suppressed [ 513.641163][T28348] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 513.676189][T28386] netlink: 'syz.0.7809': attribute type 10 has an invalid length. [ 513.684044][T28386] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7809'. [ 513.849098][T28393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28393 comm=syz.0.7811 [ 513.913329][T28392] netlink: 'syz.0.7811': attribute type 10 has an invalid length. [ 513.922396][T28392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.936271][T28392] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 513.954301][T28398] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 513.973900][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7812'. [ 514.200320][T28422] loop4: detected capacity change from 0 to 256 [ 514.215124][T28422] FAT-fs (loop4): Directory bread(block 64) failed [ 514.221980][T28422] FAT-fs (loop4): Directory bread(block 65) failed [ 514.228869][T28422] FAT-fs (loop4): Directory bread(block 66) failed [ 514.236019][T28422] FAT-fs (loop4): Directory bread(block 67) failed [ 514.245825][T28422] FAT-fs (loop4): Directory bread(block 68) failed [ 514.259400][T28422] FAT-fs (loop4): Directory bread(block 69) failed [ 514.271453][T28422] FAT-fs (loop4): Directory bread(block 70) failed [ 514.286776][T28425] netlink: 'syz.2.7821': attribute type 10 has an invalid length. [ 514.287686][T28422] FAT-fs (loop4): Directory bread(block 71) failed [ 514.294758][T28425] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7821'. [ 514.320883][T28422] FAT-fs (loop4): Directory bread(block 72) failed [ 514.330700][T28422] FAT-fs (loop4): Directory bread(block 73) failed [ 514.408483][T28430] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7823'. [ 514.465461][T28433] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 514.491369][T28433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7824'. [ 514.764906][T28453] netlink: 'syz.3.7832': attribute type 10 has an invalid length. [ 514.772826][T28453] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7832'. [ 514.906043][T28466] ip6gre1: entered allmulticast mode [ 514.967384][T28466] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 514.978778][T28466] batman_adv: batadv0: Adding interface: ip6gretap1 [ 514.985453][T28466] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.011313][T28466] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 515.029259][T28473] loop3: detected capacity change from 0 to 512 [ 515.037200][T28473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 515.048916][T28473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 515.057862][T28473] System zones: 1-12 [ 515.062885][T28473] EXT4-fs (loop3): 1 truncate cleaned up [ 515.069205][T28473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.091372][T27140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.000647][T28516] loop2: detected capacity change from 0 to 1768 [ 516.108168][T28525] netlink: 'syz.1.7860': attribute type 10 has an invalid length. [ 516.128757][T28527] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 516.138187][T28527] netlink: 'syz.3.7861': attribute type 7 has an invalid length. [ 516.420175][T28555] loop3: detected capacity change from 0 to 512 [ 516.438754][T28555] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 516.446774][T28555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 516.460702][T28555] EXT4-fs (loop3): orphan cleanup on readonly fs [ 516.467472][T28555] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 516.478780][T28555] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 516.495108][T28555] EXT4-fs (loop3): 1 truncate cleaned up [ 516.501460][T28555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 516.518795][T28555] EXT4-fs warning (device loop3): dx_probe:892: inode #2: comm syz.3.7871: dx entry: limit 65535 != root limit 120 [ 516.530993][T28555] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.7871: Corrupt directory, running e2fsck is recommended [ 516.584321][T28555] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.073561][T28375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.219303][T28375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.374230][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.381736][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.389165][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.396625][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.404066][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.411758][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.419503][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.427050][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.434627][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 517.442073][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.449538][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.456993][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.465347][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.473568][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.481468][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.489194][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.496963][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.505875][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.513485][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.521042][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.528586][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.536169][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.543653][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.551329][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.558896][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.567440][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.575390][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.583038][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.590803][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.598871][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.607404][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.615423][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.623183][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.631093][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.639114][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.647809][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.655624][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.663159][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.670723][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.678251][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.685819][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.693329][ T9457] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 517.705620][T28375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.705692][ T9457] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 517.811262][T28375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.937414][T28375] team0: left allmulticast mode [ 517.942410][T28375] team_slave_0: left allmulticast mode [ 517.948148][T28375] team_slave_1: left allmulticast mode [ 517.953822][T28375] bridge0: port 4(team0) entered disabled state [ 517.980913][T28375] vlan0: left allmulticast mode [ 517.985859][T28375] veth0_vlan: left allmulticast mode [ 517.991252][T28375] vlan0: left promiscuous mode [ 517.996295][T28375] bridge0: port 3(vlan0) entered disabled state [ 518.017028][T28375] bridge_slave_1: left allmulticast mode [ 518.022833][T28375] bridge_slave_1: left promiscuous mode [ 518.028786][T28375] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.047960][T28375] bridge_slave_0: left allmulticast mode [ 518.053900][T28375] bridge_slave_0: left promiscuous mode [ 518.059755][T28375] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.278276][T28375] batman_adv: batadv0: Removing interface: ip6gretap1 [ 518.305521][T28620] loop3: detected capacity change from 0 to 512 [ 518.328888][T28620] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.7891: Invalid inode bitmap blk 4 in block_group 0 [ 518.351614][T28620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.498589][T28375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.513339][T28375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.524352][T28375] bond0 (unregistering): Released all slaves [ 518.582370][T27140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.605658][T28633] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 518.641388][T28579] chnl_net:caif_netlink_parms(): no params data found [ 518.641537][T28636] loop3: detected capacity change from 0 to 128 [ 518.661183][T28636] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 518.672545][T28375] hsr_slave_0: left promiscuous mode [ 518.678968][T28375] hsr_slave_1: left promiscuous mode [ 518.688834][T28375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.696380][T28375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.717243][T28375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.724798][T28375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.738989][T28375] veth1_macvtap: left promiscuous mode [ 518.744526][T28375] veth0_macvtap: left promiscuous mode [ 518.750144][T28375] veth1_vlan: left promiscuous mode [ 518.755530][T28375] veth0_vlan: left promiscuous mode [ 519.036338][T28375] team_slave_1 (unregistering): left promiscuous mode [ 519.050432][T28375] team0 (unregistering): Port device team_slave_1 removed [ 519.070849][T28375] team_slave_0 (unregistering): left promiscuous mode [ 519.078414][T28375] team0 (unregistering): Port device team_slave_0 removed [ 519.153744][T28639] netlink: 'syz.1.7895': attribute type 7 has an invalid length. [ 519.191909][T28579] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.199031][T28579] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.206458][T28579] bridge_slave_0: entered allmulticast mode [ 519.213182][T28579] bridge_slave_0: entered promiscuous mode [ 519.220185][T28658] __nla_validate_parse: 3 callbacks suppressed [ 519.220202][T28658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7899'. [ 519.243192][T28579] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.251365][T28579] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.258865][T28579] bridge_slave_1: entered allmulticast mode [ 519.274253][T28579] bridge_slave_1: entered promiscuous mode [ 519.301110][T28579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.313776][T28579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.334461][T28579] team0: Port device team_slave_0 added [ 519.341427][T28579] team0: Port device team_slave_1 added [ 519.368165][T28579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.375223][T28579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.401344][T28579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.416710][T28663] netlink: 'syz.1.7901': attribute type 10 has an invalid length. [ 519.424661][T28663] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 519.436849][T28663] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 519.447751][T28663] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 519.460149][T28663] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 519.467633][T28579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.474634][T28579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.500646][T28579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.548380][T28579] hsr_slave_0: entered promiscuous mode [ 519.558401][T28579] hsr_slave_1: entered promiscuous mode [ 519.564458][T28579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.575483][T28579] Cannot create hsr debugfs directory [ 519.600634][T28670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7904'. [ 519.712203][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 519.712219][ T29] audit: type=1400 audit(2000000404.121:14623): avc: denied { watch } for pid=28674 comm="syz.1.7905" path="/syzcgroup/cpu/syz1/cpuset.cpus" dev="cgroup" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 519.745701][T28680] loop2: detected capacity change from 0 to 2048 [ 519.772924][ T29] audit: type=1326 audit(2000000404.167:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28682 comm="syz.3.7907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fded4e07b99 code=0x0 [ 519.828532][T28680] loop2: p1 < > p4 [ 519.833048][T28680] loop2: p4 size 8388608 extends beyond EOD, truncated [ 520.041048][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7910'. [ 520.120648][ T29] audit: type=1400 audit(2000000404.490:14625): avc: denied { setcurrent } for pid=28699 comm="syz.0.7911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 520.152454][T28579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 520.165226][T28579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 520.179952][T28579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 520.189483][T28579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 520.211143][T28579] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.218266][T28579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.225604][T28579] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.232716][T28579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.249446][ T29] audit: type=1400 audit(2000000404.610:14626): avc: denied { setopt } for pid=28709 comm="syz.2.7913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 520.276024][T28579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.292276][ T3155] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.301675][ T3155] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.430094][T28579] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.465942][ T3155] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.473203][ T3155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.524880][ T3155] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.532016][ T3155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.620876][T28579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.772848][T28726] loop3: detected capacity change from 0 to 1024 [ 520.778134][T28579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.779540][T28726] EXT4-fs: quotafile must be on filesystem root [ 520.890463][T28745] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7922'. [ 520.908576][ C1] vxcan0: j1939_tp_txtimer: 0xffff88810424e400: tx aborted with unknown reason: -2 [ 520.918507][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88810424fe00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 520.936151][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88810424e400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 520.954231][T28745] veth0_vlan: left promiscuous mode [ 520.959538][T28745] veth0_vlan: entered allmulticast mode [ 520.969046][T28745] veth0_vlan: entered promiscuous mode [ 520.977504][T28747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7921'. [ 521.137900][T28579] veth0_vlan: entered promiscuous mode [ 521.156694][T28579] veth1_vlan: entered promiscuous mode [ 521.200506][T28579] veth0_macvtap: entered promiscuous mode [ 521.217518][T28579] veth1_macvtap: entered promiscuous mode [ 521.242312][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.253003][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.263051][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.273806][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.283900][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.294380][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.304394][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.314891][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.324775][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.335254][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.345246][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.355990][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.365894][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.376636][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.389767][T28579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.403995][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.414667][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.414691][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.414709][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.414726][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.414748][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.414766][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.414783][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.414802][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.414879][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.414925][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.414942][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.414963][T28579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.539044][T28579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.550690][T28579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.559880][T28579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.568687][T28579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.577461][T28579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.586635][T28579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.720461][T28780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7929'. [ 521.959707][T28789] loop2: detected capacity change from 0 to 512 [ 521.968951][T28789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 521.986028][T28789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.998672][T28789] ext4 filesystem being mounted at /root/syzkaller.xXiHGh/309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.011650][T28789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.151745][T28806] xt_policy: output policy not valid in PREROUTING and INPUT [ 522.191413][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7939'. [ 522.200335][T28809] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7939'. [ 522.209368][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7939'. [ 522.220914][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7939'. [ 522.247787][T28811] veth0_vlan: left promiscuous mode [ 522.253048][T28811] veth0_vlan: entered allmulticast mode [ 522.259227][T28811] veth0_vlan: entered promiscuous mode [ 522.572304][T28833] erspan1: entered promiscuous mode [ 522.577639][T28833] erspan1: entered allmulticast mode [ 522.605940][ T29] audit: type=1326 audit(2000000406.788:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28824 comm="syz.2.7946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3cda8b99 code=0x0 [ 522.633149][T28835] loop4: detected capacity change from 0 to 512 [ 522.642539][T28835] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 522.650680][T28835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 522.663248][T28835] EXT4-fs (loop4): orphan cleanup on readonly fs [ 522.670234][T28835] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 522.683186][T28835] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 522.693797][T28835] EXT4-fs (loop4): 1 truncate cleaned up [ 522.703043][T28835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 522.716853][T28846] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 522.728946][T28835] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.7950: dx entry: limit 65535 != root limit 120 [ 522.741391][T28835] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.7950: Corrupt directory, running e2fsck is recommended [ 522.768026][ T29] audit: type=1326 audit(2000000406.936:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28834 comm="syz.4.7950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d756ebb99 code=0x0 [ 522.794376][T28835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.908105][T28856] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 522.928894][T28854] loop4: detected capacity change from 0 to 512 [ 523.057693][T28865] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 523.067141][ T29] audit: type=1400 audit(2000000407.203:14629): avc: denied { bind } for pid=28864 comm="syz.0.7960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 523.144997][ T29] audit: type=1400 audit(2000000407.287:14630): avc: denied { accept } for pid=28866 comm="syz.1.7961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 523.316442][T28883] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 523.347086][T28885] veth0_vlan: left promiscuous mode [ 523.352430][T28885] veth0_vlan: entered allmulticast mode [ 523.358504][T28885] veth0_vlan: entered promiscuous mode [ 523.561428][T28907] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 523.611326][T28912] veth0_vlan: entered allmulticast mode [ 523.675216][T28919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28919 comm=syz.0.7983 [ 523.724595][T28924] loop2: detected capacity change from 0 to 512 [ 523.733610][T28924] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 523.751471][T28924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 523.759615][T28924] EXT4-fs (loop2): orphan cleanup on readonly fs [ 523.766454][T28924] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7985: bg 0: block 361: padding at end of block bitmap is not set [ 523.781400][T28924] EXT4-fs (loop2): Remounting filesystem read-only [ 523.790653][T28924] EXT4-fs (loop2): 1 truncate cleaned up [ 523.796774][T28924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 523.809016][T28924] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 523.816643][T28924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 523.983858][T28940] ================================================================== [ 523.991984][T28940] BUG: KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead [ 524.001227][T28940] [ 524.004961][T28940] write to 0xffff88813ad68b84 of 4 bytes by task 28941 on cpu 0: [ 524.013042][T28940] do_sync_mmap_readahead+0x24c/0x2a0 [ 524.018533][T28940] filemap_fault+0x331/0xa60 [ 524.023207][T28940] __do_fault+0xb6/0x200 [ 524.028187][T28940] handle_mm_fault+0xdeb/0x2a80 [ 524.033172][T28940] exc_page_fault+0x296/0x650 [ 524.037958][T28940] asm_exc_page_fault+0x26/0x30 [ 524.042816][T28940] __get_user_4+0x11/0x20 [ 524.047524][T28940] do_vfs_ioctl+0xa4/0x1560 [ 524.052324][T28940] __se_sys_ioctl+0x81/0x150 [ 524.056962][T28940] __x64_sys_ioctl+0x43/0x50 [ 524.061696][T28940] x64_sys_call+0x1581/0x2d70 [ 524.066486][T28940] do_syscall_64+0xc9/0x1c0 [ 524.071027][T28940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.078834][T28940] [ 524.081268][T28940] write to 0xffff88813ad68b84 of 4 bytes by task 28940 on cpu 1: [ 524.089199][T28940] do_sync_mmap_readahead+0x24c/0x2a0 [ 524.094951][T28940] filemap_fault+0x331/0xa60 [ 524.099565][T28940] __do_fault+0xb6/0x200 [ 524.104613][T28940] handle_mm_fault+0xdeb/0x2a80 [ 524.109569][T28940] exc_page_fault+0x296/0x650 [ 524.115061][T28940] asm_exc_page_fault+0x26/0x30 [ 524.120197][T28940] __get_user_4+0x11/0x20 [ 524.124744][T28940] do_vfs_ioctl+0xa4/0x1560 [ 524.129446][T28940] __se_sys_ioctl+0x81/0x150 [ 524.134105][T28940] __x64_sys_ioctl+0x43/0x50 [ 524.139097][T28940] x64_sys_call+0x1581/0x2d70 [ 524.143882][T28940] do_syscall_64+0xc9/0x1c0 [ 524.148498][T28940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.154764][T28940] [ 524.157108][T28940] value changed: 0x00000000 -> 0x00000008 [ 524.162827][T28940] [ 524.165160][T28940] Reported by Kernel Concurrency Sanitizer on: [ 524.171747][T28940] CPU: 1 PID: 28940 Comm: syz.4.7989 Tainted: G W 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 524.183413][T28940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 524.194099][T28940] ==================================================================