last executing test programs: 3.711514405s ago: executing program 4 (id=3463): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910441000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72000000}, [@alu={0x7, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xcf, &(0x7f0000000140)=""/207, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) finit_module(r4, &(0x7f0000000080)='wg0\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x0) 3.356635726s ago: executing program 1 (id=3469): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x105240, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) dup3(r0, r1, 0x0) 3.334690988s ago: executing program 1 (id=3470): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) msgsnd(0x0, 0x0, 0x0, 0x800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 3.242738165s ago: executing program 1 (id=3471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYRES8=r5, @ANYRESHEX=r4, @ANYRES32=r2, @ANYRESDEC, @ANYRESDEC=r4, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES8=r6, @ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080"], 0xfdef) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00100000000000de85c12f20931c79106595", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x200, 0x9, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x67, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @local, {[@generic={0x82, 0x12, "a5feffff000000000000000897000000"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)={0x26c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0xccd421da8595f8ff}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x1b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "e9ac608a36756be494850615dec532d7852f4de042ade55ba4a72e1c339444546177cc8819019e"}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "f938f9cee829f1948a3fe45aedea3a356698fe7370a6626251210e6de83c357576f1d804758eebda34783aa440aa8a5b7530889272a34117599677c2a07a438dc425afc5ff6f06fe517d5f77bb220eff5e0fb5671545008489e7f8b82d682706576a8e92859514742b2d1fc86b41b204bb96256413b614714fb4be5d0e3d7884901302441bc9c882e2126f558798238ec25445dbe0e9a1319d67232e8d43529d8934a7f2625244822385c0345758b690d85c49e5db8fb8a99c53b82c9bfddbe88fd264abd3218b45189f9cf88badb18e089305c230a801ef20f594afbecf302cc849fdd8f815f1"}, @ETHTOOL_A_BITSET_VALUE={0x95, 0x4, "ba955bf2257b24c73b7a5f4f971d0ef797b9160cb62cbef08c331b8d33a965fbb4ca199830ebbcd272d2bca9e2af99959add030de5995d2788847778903b67626b06b91cefe222f4ef78e2fe9de40cd5f6affd7935f574adf99a36a3547732579b5ba42d4df1f953e310acf284266c81e8cc71a5dd333459b4da6524082ab6f07c8b34d0bee992fba8153e83350b56cb75"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfff}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000084}, 0xc004044) r12 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r12, &(0x7f0000002bc0), 0x0, 0x2002, 0x0) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket3={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) close(r3) 3.008509645s ago: executing program 1 (id=3472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000200)='./file1\x00', 0x921000, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) unlink(&(0x7f0000000180)='./file1\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000880)='kfree\x00', r0, 0x0, 0x800000}, 0x18) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 2.862640457s ago: executing program 4 (id=3475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x21}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x112, 0x0, 0x0, 0x80, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x0, 0x4e21, 0xfe, 0x0, @wg=@data={0x4, 0x1, 0x1, "077a884310a0dceea06b0f19d80438529d7079f70efecf63494f2828e1c123f6b5cf0d6716a60b13ef003473e6191742e5faea7f952fccfe82ce038464e342eb5ad16cf43870333110ad1c9c4b79bcc7f544be81123271dccaafd31e61c0e6c84785f6a0b2269c35f0e0160205b8bd6a37c887c1720f6bc7bd34221aa29e9cd83abb1e1edd3487a9585ba6532a23f3cc2b5d750fed7e36eb3dc0dcf14cd2bb288ec76055c27041ce4bd4fbb7129982c817785304296d76c2c29580712bfb9de5b6304c9086ba663641b1ec70af44b68e425e0d8fbe5d93cf1d21940f9d2840d3b43aa9c638c3"}}}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_adjtime(0x0, &(0x7f0000001800)={0x5f0827ea, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x7fffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000308010400000000000000000000000005000300060000001c00048008000a4000000000080009400000000008000b4000000000d825ae9d6d743a2d907948ed6f52ac16bff6f809524a2232e91633"], 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8942, &(0x7f00000004c0)="8c0b78c1f606383263c311") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 2.850075849s ago: executing program 1 (id=3476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) syz_io_uring_setup(0x4fa1, &(0x7f0000000140)={0x0, 0xda3b}, &(0x7f0000000000), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) setsockopt(r4, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=r7, @ANYBLOB='y'], 0x20) sendmmsg(r4, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.696631322s ago: executing program 4 (id=3479): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3b) write$binfmt_script(r2, &(0x7f0000000140), 0xb) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/205, 0xcd}], 0x1) tee(r1, r4, 0xaf5, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.60648307s ago: executing program 4 (id=3483): syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.546969314s ago: executing program 4 (id=3484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a4f2738a4fe839c4ecab4bb4"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xc4}, 0x18) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) timerfd_create(0x8, 0x0) 2.275595627s ago: executing program 1 (id=3487): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000000308010400000000000000e2ffffff00240004800800008000000004080002401000000500000000000000fc08000140000001ff0500030084"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) statfs(&(0x7f0000000280)='./file0\x00', 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4) fstat(0xffffffffffffffff, 0x0) syz_read_part_table(0x105d, &(0x7f0000000000)="$eJzsz81tAjEUBODxrq1o64lyTxO5pJn8nFJLWqADquAIPSCMVoYDDQCH75Ms2X6jkV54qKXM49Ln/pVkV+p4f97Epmy2tXwnrzXpvSU5lcvs0JLWa7Ksffk9pk5l39/ey0j05O8l7Vr1s/6OM3/832tPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhm5wAAAP//SRcSFg==") 1.628814552s ago: executing program 4 (id=3494): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd4(r1, &(0x7f0000000300)={[0x7]}, 0x3, 0x800) ppoll(&(0x7f0000000080)=[{r2, 0xd502}, {r2, 0x240}], 0x2, 0x0, 0x0, 0x0) unshare(0x2040400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)) signalfd4(r2, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88d) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102000000207d04412040000102030109022d00010103800e0904000701030103f109210500150122ba030905810340004002010905020340e4020000"], &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x0, 0x4, 0x7f, 0x0, 0x10, 0x9}, 0xc1, &(0x7f0000000740)={0x5, 0xf, 0xc1, 0x3, [@generic={0xa5, 0x10, 0x2, "58b4dd27b2fceeb2291bb9035e34bf30b106435f7c1e6d3b9e5dfcb77b983236516cf7f1355b8498bc1753aff4e9d3fa39d38077e86facbc28d7a8c2da70a836197fe3ceb5a8173b2ede821c0a4e459978b3055bdf2405f568a38a1ad96552f69d7162dc68f89dd90c64ff956bacc5017fc68b8f764cf474bf5afea37c910a3893c09e65629deb4087b37132fd7aeaca9b428fe4e1b37ccdb6d99eca49ffc5436d35"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xba, "33846b9a24370439ff9c72ef47fe94bd"}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x81d}}, {0xf1, &(0x7f00000008c0)=ANY=[@ANYBLOB="f10342aae8d532c9409a9bf9248693ddbfe9c8ddbd6530c85d21484f54a1ae17100f021c39cd19ea12c6e2d64414ac0f5bddaf5384e1030acdbc31de02b95b62877c8ae18eb478677ae90884322ecf8c3238a288b9ca10918513650e46e9374ea8f564de5b05c2bc5818d4b4ef516cadd3eb4b1ba5a034d7aeeb4e1d2eaca0f1dd2af52753e592accb0d9fb8d4b7d6c8251e6c7e4a949e3486b973dcbfd5570bf35dc4f708d59ba0acf98d604aa5279fae08d9536c43e7694b3e983da383a80437a85a38001d3de48f8e3ac6c180d09cf28757cb4e6bc1e44a258e7ccd8bb1ffffdabf1c29ff741f499799b2f97235b531"]}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.294561s ago: executing program 3 (id=3500): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400)={[{@dioread_lock}, {@errors_remount}, {@i_version}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x40008d0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file2/file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0x2, 0xfffff000}]}, 0xc, 0x2) syz_clone3(&(0x7f0000000340)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 1.038970902s ago: executing program 0 (id=3505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x21}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x112, 0x0, 0x0, 0x80, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x0, 0x4e21, 0xfe, 0x0, @wg=@data={0x4, 0x1, 0x1, "077a884310a0dceea06b0f19d80438529d7079f70efecf63494f2828e1c123f6b5cf0d6716a60b13ef003473e6191742e5faea7f952fccfe82ce038464e342eb5ad16cf43870333110ad1c9c4b79bcc7f544be81123271dccaafd31e61c0e6c84785f6a0b2269c35f0e0160205b8bd6a37c887c1720f6bc7bd34221aa29e9cd83abb1e1edd3487a9585ba6532a23f3cc2b5d750fed7e36eb3dc0dcf14cd2bb288ec76055c27041ce4bd4fbb7129982c817785304296d76c2c29580712bfb9de5b6304c9086ba663641b1ec70af44b68e425e0d8fbe5d93cf1d21940f9d2840d3b43aa9c638c3"}}}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_adjtime(0x0, &(0x7f0000001800)={0x5f0827ea, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x7fffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000308010400000000000000000000000005000300060000001c00048008000a4000000000080009400000000008000b4000000000d825ae9d6d743a2d907948ed6f52ac16bff6f809524a2232e91633"], 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8942, &(0x7f00000004c0)="8c0b78c1f606383263c311") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 892.696904ms ago: executing program 0 (id=3508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYRES8=r4, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRESDEC, @ANYRESDEC=r3, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES8=r5, @ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 835.264149ms ago: executing program 3 (id=3509): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='S'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 780.985524ms ago: executing program 0 (id=3510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r2, 0x0, 0x40000000000}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r4], 0xb4}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 648.546595ms ago: executing program 3 (id=3512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 645.191845ms ago: executing program 0 (id=3513): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x105240, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) dup3(r0, r1, 0x0) 638.851976ms ago: executing program 2 (id=3514): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3b) write$binfmt_script(r3, &(0x7f0000000140), 0xb) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000140)=""/205, 0xcd}], 0x1) tee(r2, r5, 0xaf5, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 628.576127ms ago: executing program 0 (id=3515): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffff6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x24000, 0xa2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) uname(&(0x7f0000000780)=""/249) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) sendfile(r2, r3, 0x0, 0xf800) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r5) 567.187632ms ago: executing program 3 (id=3516): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) 529.550245ms ago: executing program 2 (id=3517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x21}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x112, 0x0, 0x0, 0x80, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x0, 0x4e21, 0xfe, 0x0, @wg=@data={0x4, 0x1, 0x1, "077a884310a0dceea06b0f19d80438529d7079f70efecf63494f2828e1c123f6b5cf0d6716a60b13ef003473e6191742e5faea7f952fccfe82ce038464e342eb5ad16cf43870333110ad1c9c4b79bcc7f544be81123271dccaafd31e61c0e6c84785f6a0b2269c35f0e0160205b8bd6a37c887c1720f6bc7bd34221aa29e9cd83abb1e1edd3487a9585ba6532a23f3cc2b5d750fed7e36eb3dc0dcf14cd2bb288ec76055c27041ce4bd4fbb7129982c817785304296d76c2c29580712bfb9de5b6304c9086ba663641b1ec70af44b68e425e0d8fbe5d93cf1d21940f9d2840d3b43aa9c638c3"}}}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_adjtime(0x0, &(0x7f0000001800)={0x5f0827ea, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x7fffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000308010400000000000000000000000005000300060000001c00048008000a4000000000080009400000000008000b4000000000d825ae9d6d743a2d907948ed6f52ac16bff6f809524a2232e91633"], 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8942, &(0x7f00000004c0)="8c0b78c1f606383263c311") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 480.577959ms ago: executing program 3 (id=3518): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400)={[{@dioread_lock}, {@errors_remount}, {@i_version}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x40008d0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file2/file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0x2, 0xfffff000}]}, 0xc, 0x2) syz_clone3(&(0x7f0000000340)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 303.123074ms ago: executing program 0 (id=3519): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f00000004c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) write$P9_RLERRORu(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='S'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 232.5244ms ago: executing program 2 (id=3520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYRES8=r4, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRESDEC, @ANYRESDEC=r3, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES8=r5, @ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 147.127567ms ago: executing program 2 (id=3521): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) write$P9_RLERRORu(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='S'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 105.079551ms ago: executing program 2 (id=3522): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fchmod(r2, 0x1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000380)={0x3, &(0x7f00000001c0)=[{0xfff9, 0x34, 0x2, 0xffff0001}, {0xb16e, 0x7, 0x7f, 0x2}, {0x240, 0x2, 0x10, 0x9}]}) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) (async) poll(&(0x7f0000000100)=[{r0, 0xcf9aa3956552782d}], 0x1, 0xe7f1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000080000000000008edbec0bb43fc600f400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r4, 0x20, &(0x7f0000000280)={&(0x7f0000000340)=""/151, 0x97, 0x0, &(0x7f0000000880)=""/57, 0x39}}, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r4, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x3, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="b6080000000000007b8a69fda9ea96196686499583872374f8dd84a86e78e69188121a4ea76f6e295bff001c018b17080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000006000007040000f0ffffffb70200dd672946cc", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000085b0500008000000184300000300"/48], &(0x7f0000000540)='GPL\x00', 0x7ff, 0x49, &(0x7f0000000580)=""/73, 0x41100, 0x41, '\x00', r6, @fallback=0x2f, r7, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r4, r4], 0x0, 0x10, 0x10001, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair(0x25, 0x80006, 0x9, &(0x7f0000000740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000640)='spmi_write_end\x00', r8}, 0x18) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000000000085000400ce0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRES16=r8, @ANYRES16=r11, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x11) 63.067814ms ago: executing program 2 (id=3523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r2, 0x0, 0x40000000000}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r4], 0xb4}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 0s ago: executing program 3 (id=3524): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x105240, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) dup3(r0, r1, 0x0) kernel console output (not intermixed with test programs): wly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.499844][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.509758][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.520281][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.533749][T11873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.546248][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.556774][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.566631][T11873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.577115][T11873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.588961][T11873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.600283][T11873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.609181][T11873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.618025][T11873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.626856][T11873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.946384][T12103] loop3: detected capacity change from 0 to 256 [ 248.284031][T12123] loop0: detected capacity change from 0 to 1024 [ 248.291041][T12123] EXT4-fs: Ignoring removed bh option [ 248.301774][T12126] loop4: detected capacity change from 0 to 512 [ 248.313003][T12123] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 248.402965][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 248.580732][T12155] loop0: detected capacity change from 0 to 1024 [ 248.591101][T12126] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.700308][T12155] EXT4-fs: Ignoring removed i_version option [ 249.055577][T12166] loop1: detected capacity change from 0 to 1024 [ 249.072802][T12166] EXT4-fs: Ignoring removed bh option [ 249.097464][T12166] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 249.442954][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.617499][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 249.699784][T12200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2570'. [ 249.993808][T12213] loop1: detected capacity change from 0 to 1024 [ 250.016880][T12213] EXT4-fs: Ignoring removed i_version option [ 250.058100][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 250.058116][ T29] audit: type=1326 audit(1728658793.194:61703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.088097][ T29] audit: type=1326 audit(1728658793.194:61704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.123508][ T29] audit: type=1326 audit(1728658793.254:61705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.147207][ T29] audit: type=1326 audit(1728658793.254:61706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.170909][ T29] audit: type=1326 audit(1728658793.254:61707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.194573][ T29] audit: type=1326 audit(1728658793.254:61708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.218101][ T29] audit: type=1326 audit(1728658793.254:61709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.241832][ T29] audit: type=1326 audit(1728658793.254:61710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.268861][ T29] audit: type=1326 audit(1728658793.264:61711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.292608][ T29] audit: type=1326 audit(1728658793.404:61712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12220 comm="syz.3.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 250.294710][T12221] loop3: detected capacity change from 0 to 256 [ 250.397132][T12228] x_tables: duplicate underflow at hook 1 [ 250.411737][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 250.436910][T12226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2579'. [ 250.482951][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 251.224363][T12259] loop4: detected capacity change from 0 to 512 [ 251.245949][T12259] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.264689][T12266] loop3: detected capacity change from 0 to 1024 [ 251.272488][T12266] EXT4-fs: Ignoring removed i_version option [ 251.390820][T12270] loop3: detected capacity change from 0 to 256 [ 251.522994][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 252.176982][T12276] chnl_net:caif_netlink_parms(): no params data found [ 252.290311][T11996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 252.328436][T12302] syzkaller1: entered promiscuous mode [ 252.334067][T12302] syzkaller1: entered allmulticast mode [ 252.418180][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.425424][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.433355][T12276] bridge_slave_0: entered allmulticast mode [ 252.439855][T12276] bridge_slave_0: entered promiscuous mode [ 252.447238][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.454382][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.461734][T12276] bridge_slave_1: entered allmulticast mode [ 252.468326][T12276] bridge_slave_1: entered promiscuous mode [ 252.487437][T12276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.499185][T12276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.519820][T12276] team0: Port device team_slave_0 added [ 252.529848][ T5031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.542280][T12276] team0: Port device team_slave_1 added [ 252.560420][T12276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.567651][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.593879][T12276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.678051][ T5031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.690197][T12276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.697245][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.723427][T12276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.761836][T12276] hsr_slave_0: entered promiscuous mode [ 252.784927][T12276] hsr_slave_1: entered promiscuous mode [ 252.854298][T12276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.864002][T12276] Cannot create hsr debugfs directory [ 252.873111][ T5031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.120066][ T5031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.335783][T12321] loop4: detected capacity change from 0 to 1024 [ 253.343369][T12321] EXT4-fs: Ignoring removed bh option [ 253.362278][T12321] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 253.385618][ T5031] bridge_slave_1: left allmulticast mode [ 253.391343][ T5031] bridge_slave_1: left promiscuous mode [ 253.391375][T12323] loop2: detected capacity change from 0 to 256 [ 253.397101][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.434108][ T5031] bridge_slave_0: left allmulticast mode [ 253.439820][ T5031] bridge_slave_0: left promiscuous mode [ 253.445606][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.714184][ T5031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.742976][ T5031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.755512][ T5031] bond0 (unregistering): Released all slaves [ 253.788689][T12353] syzkaller1: entered promiscuous mode [ 253.794328][T12353] syzkaller1: entered allmulticast mode [ 253.825409][ T5031] tipc: Disabling bearer [ 253.830510][ T5031] tipc: Left network mode [ 253.856663][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 253.903150][ T5031] IPVS: stopping master sync thread 8927 ... [ 253.936631][ T5031] IPVS: stopping backup sync thread 7654 ... [ 254.022237][ T5031] hsr_slave_0: left promiscuous mode [ 254.028804][ T5031] hsr_slave_1: left promiscuous mode [ 254.038127][ T5031] veth1_macvtap: left promiscuous mode [ 254.043694][ T5031] veth0_macvtap: left promiscuous mode [ 254.049259][ T5031] veth1_vlan: left promiscuous mode [ 254.054553][ T5031] veth0_vlan: left promiscuous mode [ 254.331116][ T5031] team0 (unregistering): Port device team_slave_1 removed [ 254.346007][ T5031] team0 (unregistering): Port device team_slave_0 removed [ 254.425088][T12390] syzkaller1: entered promiscuous mode [ 254.430724][T12390] syzkaller1: entered allmulticast mode [ 254.479578][T12276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.506235][T12276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.525580][T12276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.546572][T12276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.576170][T12408] loop0: detected capacity change from 0 to 1024 [ 254.617537][T12408] EXT4-fs: Ignoring removed bh option [ 254.630528][T12408] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 254.634220][T12276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.661958][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.671878][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.679108][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.731817][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.738973][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.766389][T12423] loop0: detected capacity change from 0 to 512 [ 254.826725][T12423] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.870573][T12276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.881109][T12276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.904743][ T5031] IPVS: stop unused estimator thread 0... [ 255.018936][T12440] loop3: detected capacity change from 0 to 1024 [ 255.045343][T12440] EXT4-fs: Ignoring removed i_version option [ 255.083351][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 255.155372][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.243283][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'. [ 255.401151][T12474] syzkaller1: entered promiscuous mode [ 255.406778][T12474] syzkaller1: entered allmulticast mode [ 255.489661][T12276] veth0_vlan: entered promiscuous mode [ 255.535703][T12276] veth1_vlan: entered promiscuous mode [ 255.555215][T12481] xt_l2tp: v2 sid > 0xffff: 150994944 [ 255.591559][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 255.591576][ T29] audit: type=1400 audit(1728658798.724:61880): avc: denied { prog_load } for pid=12480 comm="syz.4.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 255.617245][ T29] audit: type=1400 audit(1728658798.724:61881): avc: denied { bpf } for pid=12480 comm="syz.4.2634" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.681048][T12276] veth0_macvtap: entered promiscuous mode [ 255.685789][T12434] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 255.702566][T12276] veth1_macvtap: entered promiscuous mode [ 255.708560][ T29] audit: type=1326 audit(1728658798.744:61882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 255.732302][ T29] audit: type=1326 audit(1728658798.744:61883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 255.755990][ T29] audit: type=1400 audit(1728658798.744:61884): avc: denied { map_create } for pid=12484 comm="syz.3.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 255.775298][ T29] audit: type=1326 audit(1728658798.744:61885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 255.798889][ T29] audit: type=1326 audit(1728658798.744:61886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 255.822577][ T29] audit: type=1326 audit(1728658798.744:61887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 255.846332][ T29] audit: type=1326 audit(1728658798.744:61888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 255.869971][ T29] audit: type=1326 audit(1728658798.744:61889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12484 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 255.922822][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.933173][T12489] loop4: detected capacity change from 0 to 1024 [ 255.933327][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.949533][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.960046][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.969948][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.980515][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.993883][T12276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.002289][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.012803][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.020843][T12489] EXT4-fs: Ignoring removed bh option [ 256.022846][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.038717][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.041779][T12489] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 256.048585][T12276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.068809][T12276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.079502][T12276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.088424][T12276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.097289][T12276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.106060][T12276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.114832][T12276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.333545][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 256.447841][T12506] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2643'. [ 256.710139][T12526] loop4: detected capacity change from 0 to 1024 [ 256.716391][T12522] loop3: detected capacity change from 0 to 512 [ 256.717001][T12526] EXT4-fs: Ignoring removed i_version option [ 256.767874][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 256.933412][T12522] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.963652][T12530] loop0: detected capacity change from 0 to 128 [ 256.991376][T12530] x_tables: duplicate underflow at hook 1 [ 257.088694][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2650'. [ 257.097660][T12526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.105278][T12526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.113730][T12526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.121191][T12526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.750412][T12565] loop0: detected capacity change from 0 to 128 [ 257.777915][T12570] loop4: detected capacity change from 0 to 128 [ 257.800252][T12578] loop2: detected capacity change from 0 to 1024 [ 257.823720][T12578] EXT4-fs: Ignoring removed bh option [ 257.835628][T12565] x_tables: duplicate underflow at hook 1 [ 257.835701][T12570] x_tables: duplicate underflow at hook 1 [ 257.849065][T12578] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 258.065559][T12594] syzkaller1: entered promiscuous mode [ 258.071141][T12594] syzkaller1: entered allmulticast mode [ 258.127314][T12599] loop3: detected capacity change from 0 to 1024 [ 258.134395][T12599] EXT4-fs: Ignoring removed i_version option [ 258.159112][T12599] EXT4-fs mount: 30 callbacks suppressed [ 258.159129][T12599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.197733][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 258.212021][T12609] loop2: detected capacity change from 0 to 512 [ 258.235161][T12609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.250533][T12609] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.269242][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.508806][T12642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2692'. [ 258.677511][T12646] loop0: detected capacity change from 0 to 1024 [ 258.696384][T12646] EXT4-fs: Ignoring removed i_version option [ 258.719222][T12646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.841411][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 258.850420][T12647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.857868][T12647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.914039][T12647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.921548][T12647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.165519][T11873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.176546][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.371746][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2708'. [ 259.494974][T12699] loop4: detected capacity change from 0 to 512 [ 259.533376][T12703] loop0: detected capacity change from 0 to 1024 [ 259.553508][T12703] EXT4-fs: Ignoring removed i_version option [ 259.573394][T12699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.586191][T12699] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.746890][T12703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.224192][T11873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.413008][T12535] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 260.419082][T12784] __nla_validate_parse: 7 callbacks suppressed [ 260.419100][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2740'. [ 260.522909][T12787] loop2: detected capacity change from 0 to 256 [ 260.701682][T12777] loop3: detected capacity change from 0 to 128 [ 260.713452][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 260.713469][ T29] audit: type=1326 audit(1728658803.854:62234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12786 comm="syz.2.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 260.794090][T12777] x_tables: duplicate underflow at hook 1 [ 260.910514][ T29] audit: type=1326 audit(1728658804.044:62235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 260.933776][ T29] audit: type=1326 audit(1728658804.044:62236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 261.006516][ T29] audit: type=1326 audit(1728658804.044:62237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 261.015719][T12789] loop0: detected capacity change from 0 to 128 [ 261.029702][ T29] audit: type=1326 audit(1728658804.044:62238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 261.059179][ T29] audit: type=1326 audit(1728658804.044:62239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 261.082272][ T29] audit: type=1326 audit(1728658804.094:62240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 261.105404][ T29] audit: type=1326 audit(1728658804.094:62241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 261.128615][ T29] audit: type=1326 audit(1728658804.094:62242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 261.152214][ T29] audit: type=1326 audit(1728658804.094:62243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 261.180414][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.198850][T12803] loop2: detected capacity change from 0 to 256 [ 261.227959][T12789] x_tables: duplicate underflow at hook 1 [ 261.242623][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 261.406568][T12811] loop3: detected capacity change from 0 to 1024 [ 261.428090][T12811] EXT4-fs: Ignoring removed bh option [ 261.439132][T12811] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 261.454332][T12816] bio_check_eod: 38 callbacks suppressed [ 261.454346][T12816] syz.0.2752: attempt to access beyond end of device [ 261.454346][T12816] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 261.488753][T12811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.586798][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.725845][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2760'. [ 261.968562][T12859] loop1: detected capacity change from 0 to 1024 [ 262.001555][T12859] EXT4-fs: Ignoring removed bh option [ 262.008727][T12861] __vm_enough_memory: pid: 12861, comm: syz.0.2771, bytes: 549023674368 not enough memory for the allocation [ 262.021824][T12859] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 262.039562][T12859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.123906][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.471244][T12870] loop4: detected capacity change from 0 to 128 [ 262.495418][T12870] x_tables: duplicate underflow at hook 1 [ 262.560609][T12885] loop0: detected capacity change from 0 to 1024 [ 262.582197][T12885] EXT4-fs: Ignoring removed i_version option [ 262.610484][T12885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.654199][T12890] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 262.692575][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 262.698280][T12890] EXT4-fs (loop0): Remounting filesystem read-only [ 262.713679][T12892] loop3: detected capacity change from 0 to 256 [ 262.886894][T11873] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 262.928523][T11873] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 262.963268][T11873] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 262.984290][T11873] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 262.999226][T11873] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 263.046407][T11873] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 263.063351][T11873] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 263.171682][T12908] loop3: detected capacity change from 0 to 256 [ 263.267374][T12910] syzkaller1: entered promiscuous mode [ 263.272983][T12910] syzkaller1: entered allmulticast mode [ 263.305927][T11873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.327483][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.410500][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.476816][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.531577][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.591208][ T28] bridge_slave_1: left allmulticast mode [ 263.596940][ T28] bridge_slave_1: left promiscuous mode [ 263.602617][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.622092][ T28] bridge_slave_0: left allmulticast mode [ 263.627838][ T28] bridge_slave_0: left promiscuous mode [ 263.633565][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.649712][T12938] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2800'. [ 263.672444][T12940] loop3: detected capacity change from 0 to 256 [ 263.777631][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.789320][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.802536][ T28] bond0 (unregistering): Released all slaves [ 263.902944][ T28] hsr_slave_0: left promiscuous mode [ 263.908977][ T28] hsr_slave_1: left promiscuous mode [ 263.954260][ T28] veth1_macvtap: left promiscuous mode [ 263.959883][ T28] veth0_macvtap: left promiscuous mode [ 263.965507][ T28] veth1_vlan: left promiscuous mode [ 263.970754][ T28] veth0_vlan: left promiscuous mode [ 264.097532][ T28] team0 (unregistering): Port device team_slave_1 removed [ 264.102357][T12979] 9pnet_fd: Insufficient options for proto=fd [ 264.111376][ T28] team0 (unregistering): Port device team_slave_0 removed [ 264.155616][T12945] syzkaller1: entered promiscuous mode [ 264.161183][T12945] syzkaller1: entered allmulticast mode [ 264.204066][T12985] loop1: detected capacity change from 0 to 1024 [ 264.213007][T12985] EXT4-fs: Ignoring removed i_version option [ 264.235130][T12984] loop4: detected capacity change from 0 to 1024 [ 264.242516][T12984] EXT4-fs: Ignoring removed bh option [ 264.249363][T12984] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 264.280284][T12984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.295358][T12985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.303396][T12993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2814'. [ 264.314056][T12912] chnl_net:caif_netlink_parms(): no params data found [ 264.391714][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.404455][T13003] syzkaller1: entered promiscuous mode [ 264.409973][T13003] syzkaller1: entered allmulticast mode [ 264.417302][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'. [ 264.426351][T12985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.433901][T12985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.464104][T12985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.471611][T12985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.541209][T12912] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.548438][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.555826][T12912] bridge_slave_0: entered allmulticast mode [ 264.562357][T12912] bridge_slave_0: entered promiscuous mode [ 264.570980][T12912] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.578431][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.591121][T12912] bridge_slave_1: entered allmulticast mode [ 264.598938][T12912] bridge_slave_1: entered promiscuous mode [ 264.624676][T12912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.644872][T12912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.716362][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.731588][T12912] team0: Port device team_slave_0 added [ 264.739019][T12912] team0: Port device team_slave_1 added [ 264.777232][T13026] loop3: detected capacity change from 0 to 1024 [ 264.784141][T13026] EXT4-fs: Ignoring removed i_version option [ 264.788508][T12912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.797298][T12912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.823323][T12912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.835259][T12912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.842290][T12912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.868315][T12912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.980899][T12912] hsr_slave_0: entered promiscuous mode [ 264.988566][T13026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.006560][T12912] hsr_slave_1: entered promiscuous mode [ 265.018632][T12912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.052134][T12912] Cannot create hsr debugfs directory [ 265.141072][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2818'. [ 265.239199][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2820'. [ 265.334898][T13050] 9pnet_fd: Insufficient options for proto=fd [ 265.443663][T12912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.455646][T12912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.465219][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.471504][T12912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.526000][T12912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.541539][T13073] syzkaller1: entered promiscuous mode [ 265.547181][T13073] syzkaller1: entered allmulticast mode [ 265.596424][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2825'. [ 265.642081][T13082] loop1: detected capacity change from 0 to 512 [ 265.661055][T13082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.702030][T12912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.709601][T13082] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.716250][T12912] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.738924][ T5031] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.746207][ T5031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.787028][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.794184][ T5031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.815776][T13092] vlan3: entered allmulticast mode [ 265.859565][T12912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.890077][T13100] @ÿ: renamed from veth0_vlan (while UP) [ 265.905954][T13101] syzkaller1: entered promiscuous mode [ 265.911553][T13101] syzkaller1: entered allmulticast mode [ 265.967846][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 265.967863][ T29] audit: type=1326 audit(1728658809.104:62598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.4.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e927dff9 code=0x7ffc0000 [ 266.004647][ T29] audit: type=1326 audit(1728658809.104:62599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.4.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e927dff9 code=0x7ffc0000 [ 266.048198][T12912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.068511][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2830'. [ 266.290187][T12912] veth0_vlan: entered promiscuous mode [ 266.298501][T12912] veth1_vlan: entered promiscuous mode [ 266.312052][T12912] veth0_macvtap: entered promiscuous mode [ 266.319750][T12912] veth1_macvtap: entered promiscuous mode [ 266.335936][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.346514][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.357226][T12912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.366831][T12912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.377332][T12912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.388192][T12912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.396873][T12912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.405786][T12912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.414624][T12912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.423348][T12912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.446330][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2833'. [ 266.865722][ T29] audit: type=1400 audit(1728658810.004:62600): avc: denied { create } for pid=13178 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 266.888366][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.935393][ T29] audit: type=1400 audit(1728658810.064:62601): avc: denied { create } for pid=13178 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.968637][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2837'. [ 266.998811][T13186] loop1: detected capacity change from 0 to 1024 [ 267.027197][ T29] audit: type=1400 audit(1728658810.104:62602): avc: denied { write } for pid=13178 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.028180][T13186] EXT4-fs: Ignoring removed bh option [ 267.047674][ T29] audit: type=1400 audit(1728658810.104:62603): avc: denied { nlmsg_write } for pid=13178 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.133716][T13186] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 267.175018][T13186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.260402][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.290844][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2844'. [ 267.380499][T13214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2845'. [ 267.462931][ T29] audit: type=1326 audit(1728658810.594:62604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e927dff9 code=0x7ffc0000 [ 267.486144][ T29] audit: type=1326 audit(1728658810.594:62605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e927dff9 code=0x7ffc0000 [ 267.509493][ T29] audit: type=1326 audit(1728658810.594:62606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86e927dff9 code=0x7ffc0000 [ 267.533019][ T29] audit: type=1326 audit(1728658810.594:62607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13222 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e927dff9 code=0x7ffc0000 [ 267.568560][T13226] 9pnet_fd: Insufficient options for proto=fd [ 267.701700][T13238] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2854'. [ 267.791556][T13240] syz_tun: entered promiscuous mode [ 267.805863][T13240] macvtap1: entered promiscuous mode [ 267.811430][T13240] macvtap1: entered allmulticast mode [ 267.816965][T13240] syz_tun: entered allmulticast mode [ 267.829360][T13223] loop1: detected capacity change from 0 to 128 [ 267.848978][T13240] syz_tun: left allmulticast mode [ 267.854242][T13240] syz_tun: left promiscuous mode [ 267.871415][T13242] bridge0: port 3(vlan3) entered blocking state [ 267.877901][T13242] bridge0: port 3(vlan3) entered disabled state [ 267.893349][T13242] vlan3: entered allmulticast mode [ 267.900836][T13242] vlan3: left allmulticast mode [ 268.056538][ T9] hid (null): global environment stack underflow [ 268.063040][ T9] hid (null): global environment stack underflow [ 268.069458][ T9] hid (null): report_id 0 is invalid [ 268.075954][T13255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.122196][T13255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.135379][ T9] hid-generic FFFC:0000:FFFFFFFF.0001: global environment stack underflow [ 268.144086][ T9] hid-generic FFFC:0000:FFFFFFFF.0001: item 0 4 1 11 parsing failed [ 268.169820][ T9] hid-generic FFFC:0000:FFFFFFFF.0001: probe with driver hid-generic failed with error -22 [ 268.368141][T13265] loop4: detected capacity change from 0 to 512 [ 268.394125][T13265] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.2867: iget: bogus i_mode (0) [ 268.434716][T13265] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2867: couldn't read orphan inode 17 (err -117) [ 268.477328][T13265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.546916][T13265] can0: slcan on ttyS3. [ 268.554187][T13265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2867'. [ 268.663325][T13280] can0 (unregistered): slcan off ttyS3. [ 268.669072][T13280] Falling back ldisc for ttyS3. [ 268.704392][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.892152][T13311] syz.2.2881[13311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.892240][T13311] syz.2.2881[13311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.909577][T13312] lo speed is unknown, defaulting to 1000 [ 268.923089][T13311] syz.2.2881[13311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.933232][T13307] loop3: detected capacity change from 0 to 1024 [ 268.968769][T13312] lo speed is unknown, defaulting to 1000 [ 268.973819][T13307] EXT4-fs: Ignoring removed i_version option [ 268.995179][T13316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2876'. [ 269.005196][T13312] lo speed is unknown, defaulting to 1000 [ 269.011435][T13312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 269.030712][T13307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.043983][T13312] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 269.105930][T13312] lo speed is unknown, defaulting to 1000 [ 269.112046][T13312] lo speed is unknown, defaulting to 1000 [ 269.194657][T13295] lo speed is unknown, defaulting to 1000 [ 269.218046][T13312] lo speed is unknown, defaulting to 1000 [ 269.264614][T13312] lo speed is unknown, defaulting to 1000 [ 269.270673][T13312] lo speed is unknown, defaulting to 1000 [ 269.276754][T13312] lo speed is unknown, defaulting to 1000 [ 269.288444][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'. [ 269.623919][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.746063][T13359] loop1: detected capacity change from 0 to 256 [ 269.861077][T13371] xt_limit: Overflow, try lower: 0/0 [ 269.984619][T13374] IPVS: Error joining to the multicast group [ 270.213284][T13384] macvtap1: entered promiscuous mode [ 270.218669][T13384] vlan1: entered promiscuous mode [ 270.224090][T13384] macvtap1: entered allmulticast mode [ 270.229490][T13384] vlan1: entered allmulticast mode [ 270.234666][T13384] veth0_vlan: entered allmulticast mode [ 270.354075][T13397] loop4: detected capacity change from 0 to 512 [ 270.364843][T13401] usb usb9: usbfs: process 13401 (syz.0.2909) did not claim interface 0 before use [ 270.384068][T13397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.397837][T13397] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.678069][T13415] lo speed is unknown, defaulting to 1000 [ 270.723700][T12991] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 270.923003][T13423] __nla_validate_parse: 6 callbacks suppressed [ 270.923023][T13423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2917'. [ 270.989295][T13427] lo speed is unknown, defaulting to 1000 [ 271.050119][T13430] loop3: detected capacity change from 0 to 1024 [ 271.083656][T13430] EXT4-fs: Ignoring removed bh option [ 271.113802][T13430] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 271.144405][T13430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.227981][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.313643][T13440] syzkaller1: entered promiscuous mode [ 271.319259][T13440] syzkaller1: entered allmulticast mode [ 271.385863][T13427] loop2: detected capacity change from 0 to 128 [ 271.507513][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.519428][T13449] loop0: detected capacity change from 0 to 128 [ 271.560072][T13449] loop0: detected capacity change from 0 to 512 [ 271.575298][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 271.575313][ T29] audit: type=1400 audit(1728658814.714:62752): avc: denied { write } for pid=13451 comm="syz.4.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.619954][T13449] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2927: corrupted in-inode xattr: invalid ea_ino [ 271.634133][T13449] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2927: couldn't read orphan inode 15 (err -117) [ 271.647184][T13449] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.672403][ T29] audit: type=1326 audit(1728658814.804:62753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.696109][ T29] audit: type=1326 audit(1728658814.804:62754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.698082][T13463] lo speed is unknown, defaulting to 1000 [ 271.720627][ T29] audit: type=1326 audit(1728658814.814:62755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.749153][ T29] audit: type=1326 audit(1728658814.814:62756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.773336][ T29] audit: type=1326 audit(1728658814.814:62757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.867585][ T29] audit: type=1326 audit(1728658815.004:62758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.893983][ T29] audit: type=1326 audit(1728658815.024:62759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.919828][ T29] audit: type=1326 audit(1728658815.054:62760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.943543][ T29] audit: type=1326 audit(1728658815.054:62761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13447 comm="syz.0.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d085dff9 code=0x7ffc0000 [ 271.979034][T13466] loop2: detected capacity change from 0 to 1024 [ 271.986629][T13466] EXT4-fs: Ignoring removed bh option [ 271.992933][T13466] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 272.005767][T13449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.015880][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.023659][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.031460][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.039251][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.047010][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.054769][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.062648][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.070446][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.078250][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.086114][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.094065][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.101819][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.109647][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.117405][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.125187][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.132989][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.140722][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.148483][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.156243][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: unknown main item tag 0x0 [ 272.210397][ T3346] hid-generic FFFC:0000:FFFFFFFF.0002: hidraw0: HID v0.01 Device [syz0] on syz0 [ 272.284017][T13449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.307191][T13466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.334792][T13475] loop4: detected capacity change from 0 to 128 [ 272.341510][T13475] vfat: Unknown parameter '' [ 272.408313][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.455914][T12912] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 272.596060][T13495] loop2: detected capacity change from 0 to 1024 [ 272.609952][T13495] EXT4-fs: Ignoring removed i_version option [ 272.720490][T13501] loop0: detected capacity change from 0 to 1024 [ 272.727467][T13495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.739840][T13501] EXT4-fs: Ignoring removed i_version option [ 272.756623][T13501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.788263][T13491] lo speed is unknown, defaulting to 1000 [ 272.831637][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 272.840716][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.848175][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.955316][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.962779][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.002534][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2944'. [ 273.011528][T13503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.018950][T13503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.060543][T13503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.068192][T13503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.166696][T13501] lo speed is unknown, defaulting to 1000 [ 273.254327][T13514] loop4: detected capacity change from 0 to 512 [ 273.261091][T13514] EXT4-fs: Ignoring removed oldalloc option [ 273.267718][T13514] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 273.305140][T13514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 273.317786][T13514] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.372701][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.488702][T12912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.498096][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'. [ 273.639281][T13533] loop0: detected capacity change from 0 to 512 [ 273.656572][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 273.671627][T13533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.712161][T13533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.738999][T13533] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.813023][T12912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.848927][T13548] loop0: detected capacity change from 0 to 1024 [ 273.856167][T13548] EXT4-fs: Ignoring removed bh option [ 273.862432][T13548] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 273.875094][T13548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.944215][T12912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.978729][T13551] loop1: detected capacity change from 0 to 1024 [ 273.995452][T13551] EXT4-fs: Ignoring removed i_version option [ 274.053021][T13551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.077093][T13562] lo speed is unknown, defaulting to 1000 [ 274.099731][T13546] lo speed is unknown, defaulting to 1000 [ 274.141758][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 274.388048][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.455493][T13575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2964'. [ 274.525383][T13579] syzkaller1: entered promiscuous mode [ 274.530933][T13579] syzkaller1: entered allmulticast mode [ 274.567449][T13581] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2967'. [ 274.655155][T13585] loop0: detected capacity change from 0 to 256 [ 275.063110][T13602] lo speed is unknown, defaulting to 1000 [ 275.070206][T13608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2977'. [ 275.093816][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 275.169511][T13611] loop2: detected capacity change from 0 to 1024 [ 275.182104][T13611] EXT4-fs: Ignoring removed bh option [ 275.189847][T13611] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 275.212156][T13611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.217641][T13614] loop4: detected capacity change from 0 to 1024 [ 275.232850][T13614] EXT4-fs: Ignoring removed bh option [ 275.245741][T13614] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 275.262867][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.284869][T13614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.357635][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.371413][T13621] loop0: detected capacity change from 0 to 256 [ 275.971146][T13642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2989'. [ 276.046947][T13653] lo speed is unknown, defaulting to 1000 [ 276.126204][T13654] lo speed is unknown, defaulting to 1000 [ 276.185329][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 276.362595][T13670] loop0: detected capacity change from 0 to 128 [ 276.419026][T13672] syzkaller1: entered promiscuous mode [ 276.422934][T13670] syz.0.2999: attempt to access beyond end of device [ 276.422934][T13670] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 276.424601][T13672] syzkaller1: entered allmulticast mode [ 276.442302][T13677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3001'. [ 276.465227][T13669] syz.0.2999: attempt to access beyond end of device [ 276.465227][T13669] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 276.480162][T13669] syz.0.2999: attempt to access beyond end of device [ 276.480162][T13669] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 276.515342][T13669] syz.0.2999: attempt to access beyond end of device [ 276.515342][T13669] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 276.538283][T13669] syz.0.2999: attempt to access beyond end of device [ 276.538283][T13669] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 276.578614][T13669] syz.0.2999: attempt to access beyond end of device [ 276.578614][T13669] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 276.592430][T13669] syz.0.2999: attempt to access beyond end of device [ 276.592430][T13669] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 276.606782][T13669] syz.0.2999: attempt to access beyond end of device [ 276.606782][T13669] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 276.620594][T13669] syz.0.2999: attempt to access beyond end of device [ 276.620594][T13669] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 276.651744][T13669] syz.0.2999: attempt to access beyond end of device [ 276.651744][T13669] loop0: rw=0, sector=177, nr_sectors = 8 limit=128 [ 276.834016][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 276.834034][ T29] audit: type=1400 audit(1728658819.974:62947): avc: denied { setopt } for pid=13695 comm="syz.3.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 276.919133][ T29] audit: type=1400 audit(1728658820.054:62948): avc: denied { write } for pid=13695 comm="syz.3.3007" laddr=172.20.20.10 lport=56152 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 277.096585][ T29] audit: type=1400 audit(1728658820.204:62949): avc: denied { create } for pid=13702 comm="syz.3.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 277.116262][ T29] audit: type=1400 audit(1728658820.204:62950): avc: denied { setopt } for pid=13702 comm="syz.3.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 277.136550][ T29] audit: type=1400 audit(1728658820.204:62951): avc: denied { bind } for pid=13702 comm="syz.3.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 277.335693][ T29] audit: type=1400 audit(1728658820.474:62952): avc: denied { create } for pid=13704 comm="syz.3.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 277.414752][T13707] syzkaller1: entered promiscuous mode [ 277.420338][T13707] syzkaller1: entered allmulticast mode [ 277.524530][T13705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3009'. [ 277.533579][T13705] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3009'. [ 277.592712][T13716] syzkaller1: entered promiscuous mode [ 277.599045][T13716] syzkaller1: entered allmulticast mode [ 277.609077][T13718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3013'. [ 277.700124][T13722] syzkaller1: entered promiscuous mode [ 277.705807][T13722] syzkaller1: entered allmulticast mode [ 277.715369][T13730] loop2: detected capacity change from 0 to 128 [ 277.769989][T13737] loop1: detected capacity change from 0 to 512 [ 277.786133][T13737] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 277.796349][T13737] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 277.806400][T13737] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.3021: Failed to acquire dquot type 1 [ 277.826623][T13737] EXT4-fs (loop1): 1 truncate cleaned up [ 277.832676][T13737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.851075][T13737] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.875995][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.900664][T13750] syzkaller1: entered promiscuous mode [ 277.904569][ T29] audit: type=1326 audit(1728658821.034:62953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13752 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 277.906268][T13750] syzkaller1: entered allmulticast mode [ 277.930632][ T29] audit: type=1326 audit(1728658821.034:62954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13752 comm="syz.3.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2eedff9 code=0x7ffc0000 [ 277.998775][T13760] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3029'. [ 278.047741][T13765] syzkaller1: entered promiscuous mode [ 278.053374][T13765] syzkaller1: entered allmulticast mode [ 278.152523][T13775] loop0: detected capacity change from 0 to 512 [ 278.160557][T13775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.285345][T13775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.314620][T13782] vlan2: entered allmulticast mode [ 278.322999][T13780] loop4: detected capacity change from 0 to 1024 [ 278.332193][T13775] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.359489][T13780] EXT4-fs: Ignoring removed i_version option [ 278.365658][T13780] EXT4-fs: test_dummy_encryption option not supported [ 278.388041][T13783] loop3: detected capacity change from 0 to 512 [ 278.417938][T13783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.441615][T13780] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 278.456774][T13783] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.498681][T13780] loop4: detected capacity change from 0 to 512 [ 278.569877][T12912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.579282][T13780] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 278.580186][T13782] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3036: corrupted xattr block 33: invalid header [ 278.589401][T13780] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 278.601570][T13782] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 278.609647][T13780] EXT4-fs (loop4): 1 truncate cleaned up [ 278.619473][T13782] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3036: corrupted xattr block 33: invalid header [ 278.637158][T13780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.644686][T13782] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 278.659147][T13782] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3036: corrupted xattr block 33: invalid header [ 278.672976][T13782] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 278.673445][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.771104][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.797434][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3041'. [ 278.835079][T13805] lo speed is unknown, defaulting to 1000 [ 279.051784][T13818] loop1: detected capacity change from 0 to 512 [ 279.095133][T13818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.143026][T13818] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.182296][T13829] syz.0.3053[13829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.182414][T13829] syz.0.3053[13829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.219342][T13829] syz.0.3053[13829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.245874][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 279.287758][T13838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3056'. [ 279.300437][T13833] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 279.395555][T13856] lo speed is unknown, defaulting to 1000 [ 279.410925][T13858] syzkaller1: entered promiscuous mode [ 279.416513][T13858] syzkaller1: entered allmulticast mode [ 279.521820][T13864] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 279.531394][T13862] loop0: detected capacity change from 0 to 256 [ 279.727598][T13876] loop4: detected capacity change from 0 to 1024 [ 279.734961][T13876] EXT4-fs: Ignoring removed i_version option [ 279.741117][T13876] EXT4-fs: test_dummy_encryption option not supported [ 279.794963][T13883] netlink: 'syz.0.3074': attribute type 27 has an invalid length. [ 279.802838][T13883] netlink: 'syz.0.3074': attribute type 3 has an invalid length. [ 279.827613][T13886] loop3: detected capacity change from 0 to 512 [ 279.854537][T13886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.872666][T13887] syzkaller0: entered promiscuous mode [ 279.873117][T13886] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.878905][T13887] syzkaller0: entered allmulticast mode [ 279.900214][T13886] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #12: block 32: comm syz.3.3076: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 279.919206][T13886] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #12: comm syz.3.3076: directory missing '.' [ 279.991429][T13895] block device autoloading is deprecated and will be removed. [ 280.018744][T13742] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 280.081318][T13901] syzkaller1: entered promiscuous mode [ 280.087005][T13901] syzkaller1: entered allmulticast mode [ 280.122078][T13903] loop4: detected capacity change from 0 to 256 [ 280.202349][T13914] loop1: detected capacity change from 0 to 512 [ 280.222718][T13914] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 280.234402][T13914] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 280.269707][T13914] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.3086: Directory hole found for htree leaf block 0 [ 280.288986][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 280.314723][T13929] syzkaller1: entered promiscuous mode [ 280.320256][T13929] syzkaller1: entered allmulticast mode [ 280.342562][T13931] loop4: detected capacity change from 0 to 512 [ 280.375564][T13931] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.401225][T13938] loop1: detected capacity change from 0 to 512 [ 280.408884][T13938] ext4: Unknown parameter 'smackfsfloor' [ 280.442764][T13940] syzkaller1: entered promiscuous mode [ 280.448361][T13940] syzkaller1: entered allmulticast mode [ 280.809658][T13954] loop3: detected capacity change from 0 to 512 [ 280.817591][T13954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 280.831113][T13954] EXT4-fs (loop3): 1 truncate cleaned up [ 280.902763][T13963] syzkaller1: entered promiscuous mode [ 280.908459][T13963] syzkaller1: entered allmulticast mode [ 280.929384][T13965] loop2: detected capacity change from 0 to 128 [ 280.946930][T13965] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 281.024702][T13974] loop2: detected capacity change from 0 to 256 [ 281.039286][T13974] FAT-fs (loop2): Directory bread(block 64) failed [ 281.046711][T13974] FAT-fs (loop2): Directory bread(block 65) failed [ 281.053624][T13974] FAT-fs (loop2): Directory bread(block 66) failed [ 281.060423][T13974] FAT-fs (loop2): Directory bread(block 67) failed [ 281.073722][T13974] FAT-fs (loop2): Directory bread(block 68) failed [ 281.086264][T13974] FAT-fs (loop2): Directory bread(block 69) failed [ 281.093747][T13974] FAT-fs (loop2): Directory bread(block 70) failed [ 281.102522][T13974] FAT-fs (loop2): Directory bread(block 71) failed [ 281.110437][T13974] FAT-fs (loop2): Directory bread(block 72) failed [ 281.117220][T13974] FAT-fs (loop2): Directory bread(block 73) failed [ 281.129270][T13978] loop0: detected capacity change from 0 to 256 [ 281.179724][T13980] __nla_validate_parse: 1 callbacks suppressed [ 281.179740][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 281.224570][T13984] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3110'. [ 281.319261][T13992] loop3: detected capacity change from 0 to 256 [ 281.343773][T13996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3115'. [ 281.423365][T14000] loop2: detected capacity change from 0 to 128 [ 281.495459][T14000] bio_check_eod: 23 callbacks suppressed [ 281.495475][T14000] syz.2.3116: attempt to access beyond end of device [ 281.495475][T14000] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 281.510245][T14003] syzkaller1: entered promiscuous mode [ 281.520377][T14003] syzkaller1: entered allmulticast mode [ 281.536052][T13999] syz.2.3116: attempt to access beyond end of device [ 281.536052][T13999] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 281.579123][T13999] syz.2.3116: attempt to access beyond end of device [ 281.579123][T13999] loop2: rw=0, sector=177, nr_sectors = 8 limit=128 [ 281.587490][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 281.593583][T13999] syz.2.3116: attempt to access beyond end of device [ 281.593583][T13999] loop2: rw=0, sector=177, nr_sectors = 8 limit=128 [ 281.637952][T13999] syz.2.3116: attempt to access beyond end of device [ 281.637952][T13999] loop2: rw=0, sector=177, nr_sectors = 8 limit=128 [ 281.658931][T14016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.667575][T13999] syz.2.3116: attempt to access beyond end of device [ 281.667575][T13999] loop2: rw=0, sector=177, nr_sectors = 8 limit=128 [ 281.682560][T14016] 9pnet_fd: Insufficient options for proto=fd [ 281.693239][T13999] syz.2.3116: attempt to access beyond end of device [ 281.693239][T13999] loop2: rw=0, sector=177, nr_sectors = 8 limit=128 [ 281.708716][T13999] syz.2.3116: attempt to access beyond end of device [ 281.708716][T13999] loop2: rw=0, sector=177, nr_sectors = 8 limit=128 [ 281.729689][T14016] loop3: detected capacity change from 0 to 512 [ 281.737873][T13999] syz.2.3116: attempt to access beyond end of device [ 281.737873][T13999] loop2: rw=0, sector=177, nr_sectors = 8 limit=128 [ 281.751452][T13999] syz.2.3116: attempt to access beyond end of device [ 281.751452][T13999] loop2: rw=0, sector=177, nr_sectors = 8 limit=128 [ 281.769144][T14016] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.3121: iget: bogus i_mode (0) [ 281.783240][T14016] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.3121: couldn't read orphan inode 17 (err -117) [ 281.843654][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 281.843690][ T29] audit: type=1326 audit(1728658824.984:63307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e927dff9 code=0x7ffc0000 [ 281.846088][T14024] loop4: detected capacity change from 0 to 256 [ 281.850006][ T29] audit: type=1326 audit(1728658824.984:63308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f86e927dff9 code=0x7ffc0000 [ 281.903601][ T29] audit: type=1326 audit(1728658824.984:63309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86e927e033 code=0x7ffc0000 [ 281.930404][ T29] audit: type=1326 audit(1728658824.984:63310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f86e927cadf code=0x7ffc0000 [ 281.953972][ T29] audit: type=1326 audit(1728658824.984:63311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f86e927e087 code=0x7ffc0000 [ 281.977498][ T29] audit: type=1326 audit(1728658824.984:63312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86e927c990 code=0x7ffc0000 [ 282.001171][ T29] audit: type=1326 audit(1728658824.984:63313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86e927dbfb code=0x7ffc0000 [ 282.024891][ T29] audit: type=1326 audit(1728658825.014:63314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f86e927cc8a code=0x7ffc0000 [ 282.048338][ T29] audit: type=1326 audit(1728658825.014:63315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f86e927cc8a code=0x7ffc0000 [ 282.071851][ T29] audit: type=1326 audit(1728658825.014:63316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14023 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86e927c897 code=0x7ffc0000 [ 282.242395][T14035] syzkaller1: entered promiscuous mode [ 282.248031][T14035] syzkaller1: entered allmulticast mode [ 282.466850][T14063] loop4: detected capacity change from 0 to 128 [ 282.509737][T14065] syzkaller1: entered promiscuous mode [ 282.515357][T14065] syzkaller1: entered allmulticast mode [ 282.531118][T14067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3144'. [ 282.633623][T14083] syzkaller1: entered promiscuous mode [ 282.639166][T14083] syzkaller1: entered allmulticast mode [ 282.663218][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 282.728670][T14094] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 282.876219][T14100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3156'. [ 282.996020][T14107] loop1: detected capacity change from 0 to 1024 [ 283.002810][T14107] EXT4-fs: Ignoring removed bh option [ 283.023405][T14107] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 283.083455][T14112] syzkaller1: entered promiscuous mode [ 283.089077][T14112] syzkaller1: entered allmulticast mode [ 283.585270][T14155] syzkaller1: entered promiscuous mode [ 283.590905][T14155] syzkaller1: entered allmulticast mode [ 283.602212][T14152] loop0: detected capacity change from 0 to 1024 [ 283.613023][T14152] EXT4-fs: Ignoring removed i_version option [ 283.645567][T14158] loop3: detected capacity change from 0 to 512 [ 283.657879][T14158] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 283.670778][T14158] EXT4-fs (loop3): orphan cleanup on readonly fs [ 283.677855][T14158] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 283.694014][T14158] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 283.706188][T14158] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3179: bg 0: block 40: padding at end of block bitmap is not set [ 283.723047][T14152] lo speed is unknown, defaulting to 1000 [ 283.750276][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 283.760987][T14158] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 283.781708][T14158] EXT4-fs (loop3): 1 truncate cleaned up [ 283.796768][T14158] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.3179: bad symlink. [ 284.384106][ T8] IPVS: starting estimator thread 0... [ 284.446124][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 284.473082][T14175] IPVS: using max 2592 ests per chain, 129600 per kthread [ 284.489780][T14190] loop3: detected capacity change from 0 to 256 [ 284.523954][T14195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.532828][T14195] 9pnet_fd: Insufficient options for proto=fd [ 284.546538][T14195] loop1: detected capacity change from 0 to 512 [ 284.564763][T14195] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.3188: iget: bogus i_mode (0) [ 284.583129][T14195] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.3188: couldn't read orphan inode 17 (err -117) [ 284.635685][T14202] syzkaller1: entered promiscuous mode [ 284.641486][T14202] syzkaller1: entered allmulticast mode [ 284.706429][T14207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3192'. [ 284.770023][T14213] loop4: detected capacity change from 0 to 256 [ 284.840756][T14222] loop3: detected capacity change from 0 to 1024 [ 284.860817][T14222] EXT4-fs: Ignoring removed bh option [ 284.877968][T14222] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 284.950944][T14225] syzkaller1: entered promiscuous mode [ 284.957327][T14225] syzkaller1: entered allmulticast mode [ 285.062741][T14228] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.081854][T14228] 9pnet_fd: Insufficient options for proto=fd [ 285.119119][T14228] loop4: detected capacity change from 0 to 512 [ 285.120624][T14229] No such timeout policy "syz0" [ 285.139388][T14228] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.3201: iget: bogus i_mode (0) [ 285.151697][T14228] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.3201: couldn't read orphan inode 17 (err -117) [ 285.270019][T14233] loop4: detected capacity change from 0 to 1024 [ 285.291122][T14233] EXT4-fs: Ignoring removed bh option [ 285.312389][T14233] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 285.609725][T14241] loop0: detected capacity change from 0 to 1024 [ 285.618605][T14242] loop1: detected capacity change from 0 to 1024 [ 285.632410][T14241] EXT4-fs: Ignoring removed i_version option [ 285.643209][T14242] EXT4-fs: Ignoring removed i_version option [ 285.720722][T14238] lo speed is unknown, defaulting to 1000 [ 285.732363][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 285.744357][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'. [ 285.763481][T14237] lo speed is unknown, defaulting to 1000 [ 286.082387][T14255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3204'. [ 286.193738][T14261] syzkaller1: entered promiscuous mode [ 286.199290][T14261] syzkaller1: entered allmulticast mode [ 286.448444][T14274] lo speed is unknown, defaulting to 1000 [ 286.528486][T14282] loop1: detected capacity change from 0 to 256 [ 286.683086][T14291] syzkaller1: entered promiscuous mode [ 286.689064][T14291] syzkaller1: entered allmulticast mode [ 286.732054][T14293] syzkaller1: entered promiscuous mode [ 286.738340][T14293] syzkaller1: entered allmulticast mode [ 286.941015][T14304] loop0: detected capacity change from 0 to 1024 [ 286.970686][T14304] EXT4-fs: Ignoring removed bh option [ 286.976040][T14308] syzkaller1: entered promiscuous mode [ 286.981610][T14308] syzkaller1: entered allmulticast mode [ 287.001033][T14304] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 287.134003][T14317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3229'. [ 287.441199][T14325] 9pnet_fd: Insufficient options for proto=fd [ 287.658258][T14343] lo speed is unknown, defaulting to 1000 [ 287.674669][T14345] loop0: detected capacity change from 0 to 512 [ 287.735466][T14345] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.868526][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 287.868614][ T29] audit: type=1326 audit(1728658831.004:63595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.900035][ T29] audit: type=1326 audit(1728658831.044:63596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.924336][ T29] audit: type=1326 audit(1728658831.044:63597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.947980][ T29] audit: type=1326 audit(1728658831.044:63598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.971634][ T29] audit: type=1326 audit(1728658831.044:63599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.979166][T14357] loop2: detected capacity change from 0 to 256 [ 287.995355][ T29] audit: type=1326 audit(1728658831.044:63600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.995388][ T29] audit: type=1326 audit(1728658831.044:63601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.995474][ T29] audit: type=1326 audit(1728658831.044:63602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.995505][ T29] audit: type=1326 audit(1728658831.044:63603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 287.995531][ T29] audit: type=1326 audit(1728658831.064:63604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz.2.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 288.271881][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 288.311602][T14369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3247'. [ 288.510177][T12912] EXT4-fs unmount: 33 callbacks suppressed [ 288.510194][T12912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.510729][T14374] loop4: detected capacity change from 0 to 512 [ 288.532313][T14374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.545049][T14374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.557871][T14374] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.581446][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.614565][T14385] 9pnet_fd: Insufficient options for proto=fd [ 288.624310][T14389] loop3: detected capacity change from 0 to 256 [ 288.812570][T14399] vlan2: entered allmulticast mode [ 288.851229][T14402] @ÿ: renamed from veth0_vlan (while UP) [ 289.326045][T14416] loop3: detected capacity change from 0 to 512 [ 289.389120][T14416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.418000][T14411] pimreg: entered allmulticast mode [ 289.427810][T14416] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.449582][T14411] pimreg: left allmulticast mode [ 289.493965][T14424] loop1: detected capacity change from 0 to 128 [ 289.711479][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 289.761437][T14445] vlan2: entered allmulticast mode [ 289.878392][T14453] loop1: detected capacity change from 0 to 1024 [ 289.896225][T14453] EXT4-fs: Ignoring removed bh option [ 289.914067][T14453] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 289.941586][T14453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.426677][T14464] lo speed is unknown, defaulting to 1000 [ 290.495799][T14251] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 290.711556][T14466] syzkaller1: entered promiscuous mode [ 290.717827][T14466] syzkaller1: entered allmulticast mode [ 290.794230][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.001638][T14479] loop2: detected capacity change from 0 to 2048 [ 291.049923][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.059661][T14479] loop2: p3 < > p4 < > [ 291.063863][T14479] loop2: partition table partially beyond EOD, truncated [ 291.075522][T14479] loop2: p3 start 4284289 is beyond EOD, truncated [ 291.271112][T14498] loop2: detected capacity change from 0 to 1024 [ 291.278863][T14500] loop1: detected capacity change from 0 to 1024 [ 291.283435][T14498] EXT4-fs: Ignoring removed i_version option [ 291.288223][T14500] EXT4-fs: Ignoring removed bh option [ 291.298121][T14500] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 291.312001][T14500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.349101][T14498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.396477][T14493] lo speed is unknown, defaulting to 1000 [ 291.545755][T14527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3299'. [ 291.595206][T14531] loop0: detected capacity change from 0 to 256 [ 291.640997][T14532] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 291.670891][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.819498][T14539] loop4: detected capacity change from 0 to 512 [ 291.831335][T14539] EXT4-fs: Ignoring removed bh option [ 291.840207][T14539] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 291.851828][T14539] EXT4-fs (loop4): 1 truncate cleaned up [ 291.858112][T14539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.960981][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.024899][T14549] syzkaller1: entered promiscuous mode [ 292.030472][T14549] syzkaller1: entered allmulticast mode [ 292.144278][T14559] syz.4.3311[14559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.144352][T14559] syz.4.3311[14559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.172900][T14559] syz.4.3311[14559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.202130][T14559] loop4: detected capacity change from 0 to 128 [ 292.237401][T14559] msdos: Unknown parameter 'hrtimer_start' [ 292.295312][T14565] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 292.301880][T14565] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 292.310006][T14565] vhci_hcd vhci_hcd.0: Device attached [ 292.342554][T14569] loop4: detected capacity change from 0 to 1024 [ 292.385382][T14569] EXT4-fs: Ignoring removed orlov option [ 292.404753][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3312'. [ 292.433476][T14569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.464296][T14566] vhci_hcd: connection closed [ 292.466858][ T1861] vhci_hcd: stop threads [ 292.475935][ T1861] vhci_hcd: release socket [ 292.480502][ T1861] vhci_hcd: disconnect device [ 292.503832][T14569] ext4: Unknown parameter ' usec [ 292.503832][T14569] stack depth 0 [ 292.503832][T14569] processed 0 insns (limit 1000000) max_states./file1' [ 292.742435][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.984832][T10151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.123802][T14591] loop2: detected capacity change from 0 to 512 [ 293.144092][T14591] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.3321: iget: bogus i_mode (0) [ 293.155642][T14591] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.3321: couldn't read orphan inode 17 (err -117) [ 293.169133][T14591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.201673][T14591] can0: slcan on ttyS3. [ 293.223964][T14591] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3321'. [ 293.321333][T14582] lo speed is unknown, defaulting to 1000 [ 293.373954][T14591] can0 (unregistered): slcan off ttyS3. [ 293.379822][T14591] Falling back ldisc for ttyS3. [ 293.552948][T14582] chnl_net:caif_netlink_parms(): no params data found [ 293.577707][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.696359][T14582] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.704229][T14582] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.726602][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 293.726617][ T29] audit: type=1326 audit(1728658836.864:63759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.752674][T14582] bridge_slave_0: entered allmulticast mode [ 293.758298][ T29] audit: type=1326 audit(1728658836.904:63760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.768678][T14582] bridge_slave_0: entered promiscuous mode [ 293.789011][ T29] audit: type=1326 audit(1728658836.934:63761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.793812][T14582] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.816845][ T29] audit: type=1326 audit(1728658836.934:63762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.823145][T14582] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.854137][T14582] bridge_slave_1: entered allmulticast mode [ 293.860111][ T29] audit: type=1326 audit(1728658836.994:63763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.867110][T14582] bridge_slave_1: entered promiscuous mode [ 293.884437][ T29] audit: type=1326 audit(1728658836.994:63764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.913608][ T29] audit: type=1326 audit(1728658836.994:63765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.938219][ T29] audit: type=1326 audit(1728658837.004:63766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.944145][T14615] loop2: detected capacity change from 0 to 256 [ 293.962524][ T29] audit: type=1326 audit(1728658837.074:63767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 293.992407][ T29] audit: type=1326 audit(1728658837.074:63768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.2.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 294.025053][T14582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.036363][T14582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.065295][T14582] team0: Port device team_slave_0 added [ 294.075892][T14582] team0: Port device team_slave_1 added [ 294.139847][T14582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.147492][T14582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.174269][T14582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.189366][T14582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.196402][T14582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.223290][T14582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.254463][T14582] hsr_slave_0: entered promiscuous mode [ 294.260764][T14582] hsr_slave_1: entered promiscuous mode [ 294.266758][T14582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.274373][T14582] Cannot create hsr debugfs directory [ 294.568559][T14582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.672749][T14643] loop0: detected capacity change from 0 to 256 [ 294.743410][T14582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.863360][T14582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.953702][T14582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.016086][T14582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.107662][T14582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.129562][T14582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.156605][T14582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.380495][T14659] lo speed is unknown, defaulting to 1000 [ 295.577042][T14661] macvtap1: entered promiscuous mode [ 295.582420][T14661] vlan1: entered promiscuous mode [ 295.587702][T14661] macvtap1: entered allmulticast mode [ 295.593152][T14661] vlan1: entered allmulticast mode [ 295.598283][T14661] veth0_vlan: entered allmulticast mode [ 295.647904][T14582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.678842][T14582] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.689954][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.697206][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.720859][T14582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.731334][T14582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.745487][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.752595][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.832654][T14582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.845174][T14659] loop3: detected capacity change from 0 to 128 [ 296.061278][T14690] syzkaller1: entered promiscuous mode [ 296.066894][T14690] syzkaller1: entered allmulticast mode [ 296.098927][T14582] veth0_vlan: entered promiscuous mode [ 296.115405][T14582] veth1_vlan: entered promiscuous mode [ 296.149010][T14582] veth0_macvtap: entered promiscuous mode [ 296.159725][T14582] veth1_macvtap: entered promiscuous mode [ 296.188089][T14582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.200746][T14582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.211362][T14582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.220215][T14582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.229052][T14582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.237782][T14582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.331266][T14705] vlan2: entered allmulticast mode [ 296.352023][T14710] loop3: detected capacity change from 0 to 512 [ 296.366414][T14710] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.3353: iget: bogus i_mode (0) [ 296.396779][T14710] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.3353: couldn't read orphan inode 17 (err -117) [ 296.410631][T14710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.525589][T14710] can0: slcan on ttyS3. [ 296.531104][T14710] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3353'. [ 296.583207][T14710] can0 (unregistered): slcan off ttyS3. [ 296.589058][T14710] Falling back ldisc for ttyS3. [ 296.707507][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.182849][T14739] loop1: detected capacity change from 0 to 512 [ 297.189879][T14739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 297.200944][T14739] EXT4-fs (loop1): 1 truncate cleaned up [ 297.207773][T14739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.262583][T14745] vlan2: entered allmulticast mode [ 297.276805][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.416739][T14764] loop2: detected capacity change from 0 to 1024 [ 297.423506][T14764] EXT4-fs: Ignoring removed i_version option [ 297.436855][T14764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.500795][T14764] lo speed is unknown, defaulting to 1000 [ 297.539548][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 297.559107][T14783] syzkaller1: entered promiscuous mode [ 297.564686][T14783] syzkaller1: entered allmulticast mode [ 297.710621][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.766642][T14788] vlan2: entered allmulticast mode [ 298.124938][T14799] loop3: detected capacity change from 0 to 512 [ 298.131697][T14799] EXT4-fs: Ignoring removed oldalloc option [ 298.139270][T14799] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 298.165205][T14799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 298.178018][T14799] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.273822][T14814] syz_tun: entered promiscuous mode [ 298.288844][T14814] batadv_slave_0: entered promiscuous mode [ 298.390535][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 298.391796][T14814] loop2: detected capacity change from 0 to 512 [ 298.421147][T14823] vlan2: entered allmulticast mode [ 298.447220][T14814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.461665][T14814] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.463246][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 298.504415][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.507290][T14833] can0: slcan on ttyS3. [ 298.529645][T14833] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3398'. [ 298.593032][T14833] can0 (unregistered): slcan off ttyS3. [ 298.675038][T14854] loop4: detected capacity change from 0 to 1024 [ 298.681671][T14854] EXT4-fs: Ignoring removed i_version option [ 298.695653][T14854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.739901][T14854] lo speed is unknown, defaulting to 1000 [ 298.791395][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3403'. [ 298.800486][T14847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.808013][T14847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.818370][T14847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.825904][T14847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.394946][T14877] vlan2: entered allmulticast mode [ 299.463562][T14880] can0: slcan on ttyS3. [ 299.469105][T14880] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3414'. [ 299.513078][T14880] can0 (unregistered): slcan off ttyS3. [ 299.539831][T14882] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 299.588165][T14882] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 299.681329][T14892] loop1: detected capacity change from 0 to 1024 [ 299.689149][T14892] EXT4-fs: Ignoring removed bh option [ 299.695542][T14892] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 299.708955][T14892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.744490][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.775569][T14898] loop1: detected capacity change from 0 to 512 [ 299.782650][T14898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.795103][T14898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.808439][T14898] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.847725][T12276] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.898573][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 299.898592][ T29] audit: type=1326 audit(1728658843.034:63913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 299.950821][T14903] loop2: detected capacity change from 0 to 256 [ 299.974130][ T29] audit: type=1326 audit(1728658843.064:63914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 299.998389][ T29] audit: type=1326 audit(1728658843.074:63915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 300.022052][ T29] audit: type=1326 audit(1728658843.074:63916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 300.046348][ T29] audit: type=1326 audit(1728658843.074:63917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 300.069971][ T29] audit: type=1326 audit(1728658843.074:63918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 300.093563][ T29] audit: type=1326 audit(1728658843.074:63919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 300.117847][ T29] audit: type=1326 audit(1728658843.074:63920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 300.141452][ T29] audit: type=1326 audit(1728658843.074:63921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 300.165709][ T29] audit: type=1326 audit(1728658843.074:63922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd452ffdff9 code=0x7ffc0000 [ 300.281987][T14916] vlan2: entered allmulticast mode [ 300.366209][T14922] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3429'. [ 300.390921][T14920] can0: slcan on ttyS3. [ 300.433115][T14922] can0 (unregistered): slcan off ttyS3. [ 300.665938][T14929] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 301.207352][T14955] loop3: detected capacity change from 0 to 128 [ 301.214438][T14955] vfat: Unknown parameter '' [ 301.373889][T14582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.401723][T14960] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 301.476223][T14961] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 301.490742][T14969] IPVS: length: 238 != 8 [ 301.537901][T14971] loop4: detected capacity change from 0 to 1024 [ 301.545239][T14971] EXT4-fs: Ignoring removed bh option [ 301.551639][T14971] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 301.571747][T14971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.698302][T14582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.182022][T14995] loop2: detected capacity change from 0 to 512 [ 302.214898][T14995] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.3456: iget: bogus i_mode (0) [ 302.237322][T14995] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.3456: couldn't read orphan inode 17 (err -117) [ 302.251693][T14995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.277645][T14995] can0: slcan on ttyS3. [ 302.283088][T14995] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3456'. [ 302.343044][T14995] can0 (unregistered): slcan off ttyS3. [ 302.350559][T14995] Falling back ldisc for ttyS3. [ 302.380732][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.442032][T15019] loop2: detected capacity change from 0 to 128 [ 302.458834][T15019] msdos: Unknown parameter '0xffffffffffffffff' [ 302.838318][T15040] syzkaller0: entered promiscuous mode [ 302.844623][T15040] syzkaller0: entered allmulticast mode [ 303.051575][T15043] loop1: detected capacity change from 0 to 512 [ 303.058899][T15043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 303.089196][T15043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 303.097766][T15043] System zones: 1-12 [ 303.102809][T15043] EXT4-fs (loop1): 1 truncate cleaned up [ 303.109126][T15043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.153728][T15043] loop1: detected capacity change from 512 to 64 [ 303.185332][T12276] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /146/file2: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=16780288, rec_len=11778, size=1024 fake=0 [ 303.220638][T15053] loop3: detected capacity change from 0 to 1024 [ 303.228035][T15053] EXT4-fs: Ignoring removed bh option [ 303.234445][T15053] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 303.254180][T15053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.272586][T12712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.311371][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.451534][ T5031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.545160][T15072] can0: slcan on pts0. [ 303.586477][ T5031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.623557][T15073] can0 (unregistered): slcan off pts0. [ 303.661365][ T5031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.708699][T15078] loop2: detected capacity change from 0 to 1024 [ 303.730986][T15066] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 303.737550][T15066] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 303.745880][T15066] vhci_hcd vhci_hcd.0: Device attached [ 303.751724][T15078] EXT4-fs: Ignoring removed i_version option [ 303.766363][ T5031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.780110][T15083] vhci_hcd: connection closed [ 303.780297][ T36] vhci_hcd: stop threads [ 303.789316][ T36] vhci_hcd: release socket [ 303.793802][ T36] vhci_hcd: disconnect device [ 303.804727][T15078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.858279][T15078] lo speed is unknown, defaulting to 1000 [ 303.910640][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'. [ 303.923862][ T5031] bridge_slave_1: left allmulticast mode [ 303.929535][ T5031] bridge_slave_1: left promiscuous mode [ 303.935970][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.945574][ T5031] bridge_slave_0: left allmulticast mode [ 303.951261][ T5031] bridge_slave_0: left promiscuous mode [ 303.956947][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.086490][ T5031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.097836][ T5031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.108728][ T5031] bond0 (unregistering): Released all slaves [ 304.182105][ T5031] hsr_slave_0: left promiscuous mode [ 304.200816][ T5031] hsr_slave_1: left promiscuous mode [ 304.208148][ T5031] veth1_macvtap: left promiscuous mode [ 304.213791][ T5031] veth0_macvtap: left promiscuous mode [ 304.219377][ T5031] veth1_vlan: left promiscuous mode [ 304.224653][ T5031] veth0_vlan: left promiscuous mode [ 304.295587][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.336796][ T5031] team0 (unregistering): Port device team_slave_1 removed [ 304.350883][ T5031] team0 (unregistering): Port device team_slave_0 removed [ 304.410985][T15088] lo speed is unknown, defaulting to 1000 [ 304.419716][ T8] lo speed is unknown, defaulting to 1000 [ 304.429313][T15109] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 304.501929][T15088] chnl_net:caif_netlink_parms(): no params data found [ 304.502383][T15119] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 304.517229][T15118] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 304.566750][T15125] loop0: detected capacity change from 0 to 128 [ 304.576182][T15125] vfat: Unknown parameter '' [ 304.590199][T15088] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.597344][T15088] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.604623][T15088] bridge_slave_0: entered allmulticast mode [ 304.611081][T15088] bridge_slave_0: entered promiscuous mode [ 304.620150][T15129] vlan2: entered allmulticast mode [ 304.635671][T15127] syzkaller1: entered promiscuous mode [ 304.641212][T15127] syzkaller1: entered allmulticast mode [ 304.649931][T15088] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.657232][T15088] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.664692][T15088] bridge_slave_1: entered allmulticast mode [ 304.671241][T15088] bridge_slave_1: entered promiscuous mode [ 304.693407][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.706359][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.736108][T15088] team0: Port device team_slave_0 added [ 304.744198][T15088] team0: Port device team_slave_1 added [ 304.776489][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.783599][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.809787][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.821871][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.828099][T15148] loop3: detected capacity change from 0 to 1024 [ 304.829017][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.836060][T15148] EXT4-fs: Ignoring removed i_version option [ 304.861285][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.884991][T15148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.884983][T15144] loop2: detected capacity change from 0 to 128 [ 304.885271][T15144] vfat: Unknown parameter '' [ 304.931998][T15088] hsr_slave_0: entered promiscuous mode [ 304.938403][T15088] hsr_slave_1: entered promiscuous mode [ 304.944382][T15088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.952024][T15088] Cannot create hsr debugfs directory [ 304.969995][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3500'. [ 305.102509][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 305.102524][ T29] audit: type=1400 audit(1728658848.234:63999): avc: denied { remount } for pid=15162 comm="syz.2.3507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.102498][T15163] tmpfs: Unknown parameter '3Pnr_inodes' [ 305.111203][T15163] loop2: detected capacity change from 0 to 512 [ 305.154820][T15163] EXT4-fs: Mount option(s) incompatible with ext2 [ 305.164098][T15163] Cannot find set identified by id 0 to match [ 305.180032][T15163] loop2: detected capacity change from 0 to 512 [ 305.186889][T15163] EXT4-fs: Ignoring removed nobh option [ 305.192651][T15163] EXT4-fs: Ignoring removed nobh option [ 305.199607][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.210195][T15163] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 305.219314][T15163] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3507: invalid indirect mapped block 2683928664 (level 1) [ 305.233858][T15163] EXT4-fs (loop2): 1 truncate cleaned up [ 305.239896][T15163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.246010][T15170] vlan2: entered allmulticast mode [ 305.254694][T15163] EXT4-fs error (device loop2): ext4_find_dest_de:2069: inode #2: block 13: comm syz.2.3507: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 305.282061][T15163] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3507: corrupted in-inode xattr: e_value out of bounds [ 305.298877][T15163] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3507: corrupted in-inode xattr: e_value out of bounds [ 305.323063][T11398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.333801][ T29] audit: type=1400 audit(1728658848.474:64000): avc: denied { unmount } for pid=11398 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.420089][T15088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.430074][T15088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.439852][T15185] loop3: detected capacity change from 0 to 512 [ 305.447768][T15183] loop0: detected capacity change from 0 to 512 [ 305.450078][T15088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.461763][T15183] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 305.475309][T15185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.476972][T15183] EXT4-fs (loop0): 1 truncate cleaned up [ 305.491518][T15185] ext4 filesystem being mounted at /599/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.495289][T15183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.520524][ T29] audit: type=1400 audit(1728658848.654:64001): avc: denied { setopt } for pid=15184 comm="syz.3.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.551310][T15088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.577050][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.622217][T15088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.638175][T15088] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.640436][ T29] audit: type=1400 audit(1728658848.774:64002): avc: denied { setattr } for pid=15182 comm="syz.0.3515" path="/150/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 305.658599][T15088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.678232][T15088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.693447][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.700570][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.709730][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.716927][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.742263][T12912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.743944][T15196] loop3: detected capacity change from 0 to 1024 [ 305.758240][T15196] EXT4-fs: Ignoring removed i_version option [ 305.779412][T15088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.788500][T15196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.862313][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3518'. [ 305.896643][T15088] veth0_vlan: entered promiscuous mode [ 305.905047][T15088] veth1_vlan: entered promiscuous mode [ 305.922501][T15088] veth0_macvtap: entered promiscuous mode [ 305.931005][T15088] veth1_macvtap: entered promiscuous mode [ 305.931281][ T29] audit: type=1400 audit(1728658849.064:64003): avc: denied { setattr } for pid=15223 comm="syz.2.3522" name="" dev="pipefs" ino=29445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 305.937883][T15088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.974706][T15088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.985451][T15088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.994248][T15088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.003166][T15088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.011906][T15088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.034040][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.046012][T15229] vlan2: entered allmulticast mode [ 306.062946][ C0] ================================================================== [ 306.071100][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 306.078318][ C0] [ 306.080658][ C0] read-write to 0xffff8881085a8cb8 of 8 bytes by interrupt on cpu 1: [ 306.088741][ C0] wq_worker_tick+0x63/0x240 [ 306.093350][ C0] sched_tick+0xd2/0x110 [ 306.097620][ C0] update_process_times+0x15a/0x180 [ 306.102833][ C0] tick_nohz_handler+0x250/0x2d0 [ 306.107793][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 306.113008][ C0] hrtimer_interrupt+0x210/0x7b0 [ 306.117960][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 306.123869][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 306.129693][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.135689][ C0] curve25519_arch+0x2b5a/0x4ff0 [ 306.140725][ C0] mix_dh+0x5e/0x1c0 [ 306.144625][ C0] wg_noise_handshake_create_initiation+0x2ad/0x5f0 [ 306.151226][ C0] wg_packet_handshake_send_worker+0xb3/0x150 [ 306.157305][ C0] process_scheduled_works+0x483/0x9a0 [ 306.162797][ C0] worker_thread+0x51d/0x6f0 [ 306.167387][ C0] kthread+0x1d1/0x210 [ 306.171480][ C0] ret_from_fork+0x4b/0x60 [ 306.175910][ C0] ret_from_fork_asm+0x1a/0x30 [ 306.180693][ C0] [ 306.183014][ C0] read-write to 0xffff8881085a8cb8 of 8 bytes by interrupt on cpu 0: [ 306.191079][ C0] wq_worker_tick+0x63/0x240 [ 306.195681][ C0] sched_tick+0xd2/0x110 [ 306.200015][ C0] update_process_times+0x15a/0x180 [ 306.205222][ C0] tick_nohz_handler+0x250/0x2d0 [ 306.210175][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 306.215388][ C0] hrtimer_interrupt+0x210/0x7b0 [ 306.220335][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 306.226242][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 306.231891][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.237893][ C0] curve25519_arch+0x2a3a/0x4ff0 [ 306.242863][ C0] mix_dh+0x5e/0x1c0 [ 306.246770][ C0] wg_noise_handshake_create_initiation+0x2ad/0x5f0 [ 306.253365][ C0] wg_packet_handshake_send_worker+0xb3/0x150 [ 306.259442][ C0] process_scheduled_works+0x483/0x9a0 [ 306.264914][ C0] worker_thread+0x51d/0x6f0 [ 306.269512][ C0] kthread+0x1d1/0x210 [ 306.273588][ C0] ret_from_fork+0x4b/0x60 [ 306.278012][ C0] ret_from_fork_asm+0x1a/0x30 [ 306.282788][ C0] [ 306.285111][ C0] value changed: 0x0000000000000000 -> 0x0000000000002710 [ 306.292215][ C0] [ 306.294535][ C0] Reported by Kernel Concurrency Sanitizer on: [ 306.300695][ C0] CPU: 0 UID: 0 PID: 5031 Comm: kworker/u8:8 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 306.311545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 306.321606][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 306.328568][ C0] ==================================================================