last executing test programs: 4.034773608s ago: executing program 2 (id=6856): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000012880)=[{{&(0x7f00000101c0)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xb0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.136201867s ago: executing program 2 (id=6870): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000000000, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56545, 0x0, 0x0, {0x0, 0x18, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "cf979a868140fc6c0652a531e9ecab19"}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'gretap0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x1000, 0xffff, {{0x2f, 0x4, 0x3, 0x3, 0xbc, 0x68, 0x0, 0x18, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x4e, [@loopback, @multicast2]}, @ssrr={0x89, 0x27, 0x1c, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @multicast2, @broadcast, @empty, @rand_addr=0x64010102, @multicast1, @empty]}, @lsrr={0x83, 0x7, 0xb2, [@private=0xa010102]}, @lsrr={0x83, 0xb, 0xb3, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1b}]}, @ra={0x94, 0x4}, @noop, @end, @cipso={0x86, 0x5e, 0x0, [{0x5, 0xd, "a6d29a9282649678d7767f"}, {0x2, 0xe, "59e7dd1a79031ef4dba48f42"}, {0x3, 0xf, "3b972bad226def425a707fd0db"}, {0x2, 0xd, "0296cd3ec83fdaaee2b468"}, {0x6, 0xd, "dc68fead9c70914c647a4f"}, {0x1, 0x5, "92b807"}, {0x1, 0xf, "7cb82df35a622fd169dc00f3f4"}]}]}}}}}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000940)) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="40010000100013070000000000000000fe8000000000000000000000000000bbac1414000000000000000000000000000000000000000002000000f10c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb00000000000000000000000000000000320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600c9590315"], 0x140}}, 0x65fdf28cbf7bf43) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={@empty, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) socket$nl_route(0x10, 0x3, 0x0) 3.034133012s ago: executing program 2 (id=6872): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0xa1840, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000005b00)=0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffd) sendfile(r1, r2, 0x0, 0x1000000201005) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000014) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x2, {0x2, 0x0, @empty}, 'caif0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"0800000000000100fd25251c00000001"}}}}, 0x118) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x81, 0x101, r3, 0x35d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xf}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000140)={0xd5800000, 0x1, 'client0\x00', 0x80000000, "95ca82b610492b18", "74136c6dd571989fd2ef172813aeeb0d10bb6c7c95dc0ffc16b63da4ec003778", 0x5}) 2.103224576s ago: executing program 0 (id=6883): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400001}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='notify_on_release\x00', 0x2, 0x0) socket(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x7, 0x10}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x8000) preadv(0xffffffffffffffff, &(0x7f00000025c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1d, 0x3, 0xfe, 0x79, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x56c86fd2, 0x80000001}, 0x6015, 0x3b, 0x2, 0x1, 0x1f, 0x78, 0x2, 0x0, 0x3, 0x0, 0x2000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@dstopts, 0x8) 2.083913899s ago: executing program 2 (id=6884): inotify_init1(0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESOCT], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7c, &(0x7f00000001c0), 0x8) getpid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000600) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setitimer(0x0, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) 1.914640625s ago: executing program 0 (id=6885): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x464e00, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f00000022c0), &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.837844527s ago: executing program 0 (id=6886): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000f80)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000180)={0x0, 0xa, 0x10}, &(0x7f00000010c0)=0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa6, 0x4) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x4995}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xb161d8a589a0bb2a}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x90}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{0x0, 0x20000000, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0xf3406}], 0x1}}], 0xc, 0x206b99) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{}, {0x4c}, {0x6, 0x0, 0x0, 0x2}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00005, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) r9 = epoll_create(0x8) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f00000000c0)={0x7fffffff, 0x8e, 0x6, 0x13, 0x1, [{0x1, 0x3, 0x7, '\x00', 0x3}]}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fsetxattr(r10, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 1.759423909s ago: executing program 2 (id=6887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "1f00000800"}) r4 = dup3(r3, r2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061111000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x34, 0x0, @val=@iter={0x0}}, 0x40) read$watch_queue(r4, &(0x7f0000000e00)=""/4096, 0x1000) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200d20a14000200766c616e300000000000000000000000e7f3010073797a3100000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09002bbd7000fffffff3020000000900010073797a31000000000900010073797a3100000000140002006272696467655f73756176655f3000000500040001000000"], 0x48}}, 0x880) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @ipv4, @mcast1, 0x0, 0x7}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40102, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffc8f) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r8, &(0x7f0000000480)=[{&(0x7f0000000140)=""/49, 0x31}], 0x1) wait4(0x0, 0x0, 0x0, 0x0) 1.676610372s ago: executing program 3 (id=6890): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x464e00, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='lo\x00') socket$inet6(0xa, 0x80003, 0x6b) r1 = socket(0x200000000000011, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getnexthop={0x20, 0x6a, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) bind$packet(r1, &(0x7f0000000240), 0x14) getsockname$packet(r1, &(0x7f00000022c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.651638226s ago: executing program 3 (id=6891): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syslog(0x4, &(0x7f0000001300)=""/161, 0xa1) 1.61912883s ago: executing program 3 (id=6892): perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18001fc0000000000000000000001a0000009501000b60ce52b675c8380beb3135953170653a065f00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0xfffffe46) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000200000000040000040000000000000010000000000000002000000000000000"], 0x24, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='security.apparmor\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000006d56ac00000000200000000000009500000000000000d61ad26a2f6ce2e8429bf85440f17935511be775ff0a04adc8e108d8156b8bff45270d24cd2fe5806f3536cab5fae70c3c959b8127c4a0e42e13"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="184000000000000000239eda5fa02515baa995ed87ac000077a4b803dbd625a28952370b6882dd9c310c31e8dc13d6bb305edf8f1dd0f8c45f2f448ce52685"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='afs_server\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1, 0x40, 0xff, 0xff, 0x0, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x3e42}, 0x8680, 0xa102, 0x52, 0x1, 0x6, 0x20, 0x0, 0x0, 0x4dc, 0x0, 0x1f}, 0xffffffffffffffff, 0x3, r4, 0x9) close(r2) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000180)=0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0x8000) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000001c0)=r8) 1.574301277s ago: executing program 1 (id=6893): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x800000, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setrlimit(0xe, &(0x7f0000000240)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="08b9db94cc86ac0385a2ae2a95354417", 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x10, @empty}, 0x10) 1.469966533s ago: executing program 4 (id=6895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000000c0)='lo\x00') r3 = socket$inet6(0xa, 0x80003, 0x6b) r4 = socket(0x200000000000011, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getnexthop={0x28, 0x6a, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, [@NHA_MASTER={0x8, 0xe}, @NHA_OIF={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x2, 0x42, 0x40}, 0x48) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x44801) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800004, 0x10, r1, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}}, 0x4000040) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r4, &(0x7f00000022c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0xa, &(0x7f00000003c0)=[{0xbf5f, 0x28, 0x1, 0x2}, {0x8, 0x68, 0x2, 0xffff}, {0x1, 0x6, 0xfd, 0x4}, {0x0, 0x6, 0x1, 0x7f}, {0x3ff, 0x6, 0x80, 0x9}, {0xbd0, 0x8, 0xb5, 0x1f}, {0x8, 0x1, 0x3, 0x1}, {0xff, 0x7, 0x8, 0x6}, {0x40, 0x40, 0x12, 0x3}, {0xffff, 0x9, 0xfb, 0x6}]}) read$char_usb(r7, &(0x7f0000000140)=""/189, 0xfffffecd) 1.451827546s ago: executing program 3 (id=6896): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000d9fe6aab90851f0f580000000000000000336fac9664c1d4f8040a40fdbc5faf2a6648419e8129f65b60d4e7a3616dbee37e34e8401da4c6e5bdb86302fb8a051813f92a8fdd46423ccf0ff6324abe7262c677de3657422ca85da4b042"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_read_part_table(0x5a8, &(0x7f0000000000)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000880)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@discard}, {@delalloc}, {@user_xattr}, {@norecovery}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xc001, 0x0, 0x0, 0x4, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) 1.282179102s ago: executing program 4 (id=6897): setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x400) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x1508a3e46f7468c1) 1.265195395s ago: executing program 4 (id=6898): inotify_init1(0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESOCT], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7c, &(0x7f00000001c0), 0x8) getpid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000600) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setitimer(0x0, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) 941.758854ms ago: executing program 0 (id=6899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f0000000140)=@framed={{}, [@jmp={0x6}, @alu={0x7, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000006d000000b70000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_request_blocks\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8b, 0x7fffffff}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) 876.371935ms ago: executing program 2 (id=6900): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0xa1840, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000005b00)=0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffd) sendfile(r1, r2, 0x0, 0x1000000201005) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000014) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x2, {0x2, 0x0, @empty}, 'caif0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"0800000000000100fd25251c00000001"}}}}, 0x118) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x81, 0x101, r3, 0x35d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xf}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000140)={0xd5800000, 0x1, 'client0\x00', 0x80000000, "95ca82b610492b18", "74136c6dd571989fd2ef172813aeeb0d10bb6c7c95dc0ffc16b63da4ec003778", 0x5}) 860.723757ms ago: executing program 0 (id=6901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "1f00000800"}) r4 = dup3(r3, r2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061111000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x34, 0x0, @val=@iter={0x0}}, 0x40) read$watch_queue(r4, &(0x7f0000000e00)=""/4096, 0x1000) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200d20a14000200766c616e300000000000000000000000e7f3010073797a3100000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09002bbd7000fffffff3020000000900010073797a31000000000900010073797a3100000000140002006272696467655f73756176655f3000000500040001000000"], 0x48}}, 0x880) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @ipv4, @mcast1, 0x0, 0x7}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff70, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40102, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffc8f) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r8, &(0x7f0000000480)=[{&(0x7f0000000140)=""/49, 0x31}], 0x1) wait4(0x0, 0x0, 0x0, 0x0) 792.313358ms ago: executing program 4 (id=6902): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syslog(0x4, &(0x7f0000001300)=""/161, 0xa1) 704.509431ms ago: executing program 4 (id=6903): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0), 0x4) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mkdir(0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x443, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="ed9114bba73741b11128b88eb8766a4fbc652c618d44335fe13c958d00c257427fd963ee7f2480281d06aeb29b82769728a9b0e82c559e1cad0708fe45e034b4c06248f8db2f85d0ab", @ANYRES16, @ANYBLOB="810f000000000000000001000000080001000000000008000300", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300), &(0x7f00000002c0)=[&(0x7f0000000340)='rcu_utilization\x00']) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x0) 668.475547ms ago: executing program 4 (id=6904): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000012880)=[{{&(0x7f00000101c0)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xb0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 659.144718ms ago: executing program 1 (id=6905): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r2 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffff9) keyctl$reject(0x14, r2, 0x7fffffffeffc, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=r1, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c"], 0xb4}}, 0x0) 598.644658ms ago: executing program 1 (id=6906): perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18001fc0000000000000000000001a0000009501000b60ce52b675c8380beb3135953170653a065f00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0xfffffe46) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000200000000040000040000000000000010000000000000002000000000000000"], 0x24, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='security.apparmor\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000006d56ac00000000200000000000009500000000000000d61ad26a2f6ce2e8429bf85440f17935511be775ff0a04adc8e108d8156b8bff45270d24cd2fe5806f3536cab5fae70c3c959b8127c4a0e42e13"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="184000000000000000239eda5fa02515baa995ed87ac000077a4b803dbd625a28952370b6882dd9c310c31e8dc13d6bb305edf8f1dd0f8c45f2f448ce52685"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='afs_server\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1, 0x40, 0xff, 0xff, 0x0, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x3e42}, 0x8680, 0xa102, 0x52, 0x1, 0x6, 0x20, 0x0, 0x0, 0x4dc, 0x0, 0x1f}, 0xffffffffffffffff, 0x3, r4, 0x9) close(r2) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000180)=0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0x8000) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000001c0)=r8) 541.753646ms ago: executing program 3 (id=6907): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000480)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x4}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@random="85a2fa90e207", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "001f00", 0x18, 0x3a, 0x0, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @empty}}}}}}, 0x0) 382.601051ms ago: executing program 1 (id=6908): setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x400) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x1508a3e46f7468c1) 349.022936ms ago: executing program 1 (id=6909): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400), &(0x7f0000000580)=0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000080)={{0x0, @empty, 0x4622, 0x4, 'lblc\x00', 0x9, 0x5, 0x52}, {@multicast2, 0x4e26, 0x2000, 0x4, 0x2000001, 0x2}}, 0x44) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ffffffff060001000200000008000600a7"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}, 0x3}, 0x0) socket(0x1, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000100)) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=@gettaction={0xec, 0x32, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="540000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="0804040000000000"], 0x54}}, 0x0) 343.011527ms ago: executing program 3 (id=6910): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0xfffffffe}]}}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@noload}, {@discard}, {@oldalloc}]}, 0x64, 0x524, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDveO2Q7KZ1Chygh1JoUXYFaycNbSMOpUgITpWAcl9C4kRRnDhKnHYTVTQRfwAXBEic4MIFif8AVeLCsUIqgjOIIhCCLRw4AIPGHqfZrB1nF8dOnc9Hmp335tf3Pe/O87yZt+MArqynI+LliPhvmqa3IqKcLy/kUxy2p2y79+69sZxNSaTpq39LIsmXdY6V5PMb+W6TEfH1r0R8K3kw7u7+wcZSvV7byfPV5uZ2dXf/4Pb65tJaba22tbAw/8Lii4vPL84NpJ7TEfHSl/70/e/+9Msv/eKzr//hzl9ufvtksU7W4yEVz1rZjlFqfRYnd9h5xGCXUbFVw9zU+fY5usDyAADQW3aN/+GI+FRE3IpyXDv7chYAAAD4AEq/MB3/TiLS7ia6LZyMntsDAAAAl1ChNTY2KVTysQDTUShUKu0xvB+N6+mbEc3PrDb2tlbaY2hnolRYXa/X5vKxwjNRSrL8fCv9fv65dv7o3YhWfiEinoiI75WnWvnKcqO+MuqbHwAAAHBF3DjV//9nud3/BwAAAMbMzKgLAAAAAFw4/X8AAAAYf/r/AAAAMNa++sor2ZR2fv965bX9vY3Ga7dXarsblc295cpyY2e7stZorLXe2bfZ73j1RmP7c7G1d7farO02q7v7B3c2G3tbzTvr9/0ENgAAADBET3zird8lEXH4+anWlJnose21oZYMuGjF41SSz7uc/b9/vD1/d0iFAoai33f6b8pDKggwdMVRFwAYmdLDbOz/CcBYSvqs7zl45+18/snBlgcAABi82Y/3fv5fOHPPw7NXA5dev34/ML6On//3GvQHjK3W8//znvuu+GGslIzqhyuv7/P/XgMA3j5vhDR9uBIBAACDNt2akkIlv703HYVCpRLxWGu4fylZXa/X5iLi8Yj4bbn0oSw/39oz8ewQAAAAAAAAAAAAAAAAAAAAAAAAAM4pTZNIAQAAgLEWUfhz8sv2u/xny89On74/MJH8qxz5T4S+/qNXf3B3qdncmc+W//14efOH+fLnRnEHAwAAADit00/v9OMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJDeu/fGcmcaZty/fjEiZrrFL8Zkaz4ZpYi4/o8kiif2SyLi2gDiHx5FxMe6xU+yYh2H7BZ/6uLjx0z+KXSLf2MA8eEqeytrf17Ozr+JiDh5/hXi6da8+/lXjLgv/6ha7V/WwHVpfzvt37Ue5/9jp4410yPGk+/8vNoz/lHEk8Xu7U8nftIj/jPnrOM3v3Fw0Gtd+uOI2a7fP8l9sarNze3q7v7B7fXNpbXaWm1rYWH+hcUXF59fnKuurtdr+Z8PHL/Up2xZ/a/3iD/Tp/7PnrP+/3nn7r2P9ChOFv/mM13i/+on+RYPxi/k332fztPZ+tlO+rCdPumpn/36qbPqv9Kj/v3+/m+es/63vvadPx7vBACM3O7+wcZSvV7bGdtE1ku/BMWQeLTEhf4TfXOgB0zTNM3Oqf/jOEmM/APvJEbdMgEAAIP2/kX/qEsCAAAAAAAAAAAAAAAAAAAAV9cwXid2OubhcSoZxCu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4n8BAAD//1Se0eQ=") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2804010, &(0x7f00000003c0)=ANY=[], 0x1, 0x9b2, &(0x7f0000000400)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D', @ANYRES16=r5, @ANYBLOB], 0x44}}, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)='\x00\x00\x00\x00\x00', 0x5}], 0x1, 0x4) close(r3) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x888827a406865931}, 0xc, &(0x7f0000000340)={&(0x7f0000000f80)={0x10c, r7, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xac, 0x17, 0x300, 0x70bd2d, 0x25dfdbfb, {0x1e}, [@nested={0x97, 0xaa, 0x0, 0x1, [@generic="e0ba83ec53a634508f2013b9f43a03763d295d13c6934b87ad652cb861cdd9d1a015b54d6c64c238a030942fb0761b503c0d31440d7e3f7274e97f7b7336be9122e1de5bc082364a7258513b1284ce1b1766c60cc218c2875deac7997762c22f2c5f1ee0c4ca8d6ecd6cf36d411633ed5d8f4c806e53c9a232ca0081143628c46a38551d01414247a612938b1e5559a3459927"]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r8, 0x0, 0x4ffe6, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) 190.97791ms ago: executing program 1 (id=6911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "1f00000800"}) r4 = dup3(r3, r2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061111000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x34, 0x0, @val=@iter={0x0}}, 0x40) read$watch_queue(r4, &(0x7f0000000e00)=""/4096, 0x1000) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200d20a14000200766c616e300000000000000000000000e7f3010073797a3100000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09002bbd7000fffffff3020000000900010073797a31000000000900010073797a3100000000140002006272696467655f73756176655f3000000500040001000000"], 0x48}}, 0x880) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @ipv4, @mcast1, 0x0, 0x7}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40102, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffc8f) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r8, &(0x7f0000000480)=[{&(0x7f0000000140)=""/49, 0x31}], 0x1) wait4(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=6912): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="9097fdf407a1b8ad96bd45e0d80862796f5619e03814cf24a85cda187440d519d3f939a370dd4349e0755f3cd3b19727643fef2adae00bf78a308bbe56c45df90973a576bd6ef69a203dc26faaccf52b61add5ed1ffb5ab0b7e4eb10333236fadc46a9c74767892e06173b129c4e29ef96e813368383dc1a8c7fad1422621c747b7d6046719d28acd73734cfbdb0d24da5533ceaba1302a6d493bf61dce65bc9cfc82951269762eeba9b14fbf32c25d5124c5ea57045c58593fbbe4d9a8a23641525c95964c9f5"]) unshare(0x400) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_encap(r5, 0x11, 0x68, &(0x7f0000000000), 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x4f, 0x7, 0x81, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x2, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x200, 0x2, 0x2, 0x4, 0x1, 0x3, 0x0, 0x90000000, 0x0, 0xdb}, r6, 0x1, r4, 0x2) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x24}}, 0x0) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) write(r2, &(0x7f0000000140)='i', 0x1) dup2(r0, r1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 30] netlink: 'syz.4.6265': attribute type 2 has an invalid length. [ 365.032757][T22930] loop4: detected capacity change from 0 to 512 [ 365.055612][T22930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 365.079828][T22930] EXT4-fs (loop4): 1 orphan inode deleted [ 365.085697][T22930] EXT4-fs (loop4): 1 truncate cleaned up [ 365.095652][T22930] EXT4-fs error (device loop4): empty_inline_dir:1829: inode #12: block 7: comm syz.4.6265: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 365.117196][T22930] EXT4-fs warning (device loop4): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 365.241298][T22944] netlink: 'syz.4.6267': attribute type 10 has an invalid length. [ 365.249417][T22944] __nla_validate_parse: 13 callbacks suppressed [ 365.249430][T22944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6267'. [ 365.426652][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 365.426668][ T29] audit: type=1326 audit(1719523316.335:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22949 comm="syz.1.6269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f638f9c0b29 code=0x0 [ 365.471667][T22952] loop3: detected capacity change from 0 to 512 [ 365.482415][T22952] EXT4-fs (loop3): 1 truncate cleaned up [ 365.589754][T22954] devpts: called with bogus options [ 365.611932][T22960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6272'. [ 365.680155][ T29] audit: type=1400 audit(1719523316.585:16669): avc: denied { bind } for pid=22965 comm="syz.2.6276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 365.897470][T22983] loop0: detected capacity change from 0 to 512 [ 365.906216][T22983] EXT4-fs (loop0): 1 truncate cleaned up [ 365.926138][ T5729] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.969194][T22986] loop3: detected capacity change from 0 to 2048 [ 365.994144][ T5729] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.068083][T22986] loop3: detected capacity change from 0 to 1024 [ 366.083502][ T5729] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.139045][ T5729] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.151031][T22986] loop3: detected capacity change from 1024 to 96 [ 366.161106][T22986] syz.3.6282: attempt to access beyond end of device [ 366.161106][T22986] loop3: rw=34817, sector=224, nr_sectors = 120 limit=96 [ 366.183056][T22986] syz.3.6282: attempt to access beyond end of device [ 366.183056][T22986] loop3: rw=2051, sector=320, nr_sectors = 32 limit=96 [ 366.201824][T22986] EXT4-fs (loop3): discard request in group:0 block:10 count:16 failed with -5 [ 366.212295][T22986] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 366.231190][T22986] syz.3.6282: attempt to access beyond end of device [ 366.231190][T22986] loop3: rw=2051, sector=224, nr_sectors = 96 limit=96 [ 366.255187][T22987] chnl_net:caif_netlink_parms(): no params data found [ 366.277437][T22986] EXT4-fs (loop3): discard request in group:0 block:7 count:48 failed with -5 [ 366.291439][T22986] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 366.308502][ T5729] vlan0: left allmulticast mode [ 366.313396][ T5729] veth0_vlan: left allmulticast mode [ 366.318820][ T5729] vlan0: left promiscuous mode [ 366.323940][ T5729] bridge0: port 3(vlan0) entered disabled state [ 366.330437][T23021] loop0: detected capacity change from 0 to 2048 [ 366.341981][ T5729] bridge_slave_1: left allmulticast mode [ 366.347857][ T5729] bridge_slave_1: left promiscuous mode [ 366.353629][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.362095][ T5729] bridge_slave_0: left allmulticast mode [ 366.367870][ T5729] bridge_slave_0: left promiscuous mode [ 366.372755][T23021] Alternate GPT is invalid, using primary GPT. [ 366.373657][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.379835][T23021] loop0: p2 p3 p7 [ 366.473488][ T5729] dvmrp0 (unregistering): left allmulticast mode [ 366.517117][ T5729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.527483][ T5729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.537449][ T5729] bond0 (unregistering): Released all slaves [ 366.545769][ T5729] bond1 (unregistering): Released all slaves [ 366.590194][T22987] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.597427][T22987] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.605954][T22987] bridge_slave_0: entered allmulticast mode [ 366.612321][T22987] bridge_slave_0: entered promiscuous mode [ 366.620520][T22987] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.627663][T22987] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.634790][T22987] bridge_slave_1: entered allmulticast mode [ 366.641127][T22987] bridge_slave_1: entered promiscuous mode [ 366.667533][T22987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.682794][ T5729] hsr_slave_0: left promiscuous mode [ 366.689238][ T5729] hsr_slave_1: left promiscuous mode [ 366.695416][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.702886][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.712807][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.719939][T18544] syz-executor: attempt to access beyond end of device [ 366.719939][T18544] loop3: rw=2051, sector=160, nr_sectors = 32 limit=96 [ 366.720265][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.740995][T18544] EXT4-fs (loop3): discard request in group:0 block:5 count:16 failed with -5 [ 366.750457][T18544] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 366.759886][T18544] EXT4-fs (loop3): discard request in group:0 block:6 count:16 failed with -5 [ 366.760366][ T5729] veth1_macvtap: left promiscuous mode [ 366.774386][ T5729] veth0_macvtap: left promiscuous mode [ 366.778936][T18544] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 366.779923][ T5729] veth1_vlan: left promiscuous mode [ 366.793081][ T5729] veth0_vlan: left promiscuous mode [ 366.807180][T22998] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 366.885285][ T5729] team0 (unregistering): Port device team_slave_1 removed [ 366.896389][ T5729] team0 (unregistering): Port device team_slave_0 removed [ 366.933849][T22987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.944524][T23043] netlink: 'syz.3.6297': attribute type 10 has an invalid length. [ 366.952407][T23043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6297'. [ 366.969135][ T29] audit: type=1326 audit(1719523317.875:16670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23042 comm="syz.3.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c18198b29 code=0x7ffc0000 [ 366.979463][ C0] net_ratelimit: 408 callbacks suppressed [ 366.979485][ C0] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.994812][ T29] audit: type=1326 audit(1719523317.885:16671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23042 comm="syz.3.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c18198b29 code=0x7ffc0000 [ 366.998732][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 367.009953][ T29] audit: type=1326 audit(1719523317.885:16672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23042 comm="syz.3.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c18198b29 code=0x7ffc0000 [ 367.041340][ C0] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.065093][ T29] audit: type=1326 audit(1719523317.885:16673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23042 comm="syz.3.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c18198b29 code=0x7ffc0000 [ 367.084510][ C0] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.100015][ T29] audit: type=1326 audit(1719523317.885:16674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23042 comm="syz.3.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c18198b29 code=0x7ffc0000 [ 367.121791][T23047] loop0: detected capacity change from 0 to 512 [ 367.134807][ T29] audit: type=1326 audit(1719523317.885:16675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23042 comm="syz.3.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c18198b29 code=0x7ffc0000 [ 367.134835][ T29] audit: type=1326 audit(1719523317.885:16676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23042 comm="syz.3.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c18198b29 code=0x7ffc0000 [ 367.172085][ C0] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.188220][ T29] audit: type=1326 audit(1719523317.885:16677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23042 comm="syz.3.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c18198b29 code=0x7ffc0000 [ 367.225466][ C1] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.237256][ C1] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:32, vlan:0) [ 367.238171][T23047] EXT4-fs (loop0): 1 truncate cleaned up [ 367.248877][ C1] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.259376][T22987] team0: Port device team_slave_0 added [ 367.266014][ C1] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:32, vlan:0) [ 367.279473][T22987] team0: Port device team_slave_1 added [ 367.282924][ C1] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.299811][ C1] bridge0: received packet on macvlan0 with own address as source address (addr:aa:aa:aa:aa:aa:32, vlan:0) [ 367.331132][T22987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.338171][T22987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.364122][T22987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.376332][T22987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.383302][T22987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.409260][T22987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.471070][T22987] hsr_slave_0: entered promiscuous mode [ 367.492557][T22987] hsr_slave_1: entered promiscuous mode [ 367.519993][T22987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.545337][T22987] Cannot create hsr debugfs directory [ 367.758635][ T5729] team0: left allmulticast mode [ 367.758652][ T5729] team_slave_0: left allmulticast mode [ 367.758664][ T5729] team_slave_1: left allmulticast mode [ 367.758802][ T5729] bridge0: port 4(team0) entered disabled state [ 367.777207][ T5729] vlan0: left allmulticast mode [ 367.777223][ T5729] veth0_vlan: left allmulticast mode [ 367.777238][ T5729] vlan0: left promiscuous mode [ 367.777511][ T5729] bridge0: port 3(vlan0) entered disabled state [ 367.796828][ T5729] bridge_slave_1: left allmulticast mode [ 367.796846][ T5729] bridge_slave_1: left promiscuous mode [ 367.796938][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.804762][ T5729] bridge_slave_0: left allmulticast mode [ 367.804856][ T5729] bridge_slave_0: left promiscuous mode [ 367.804983][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.970770][T23056] devpts: called with bogus options [ 368.056782][ T5729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.069907][ T5729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.081370][ T5729] bond0 (unregistering): Released all slaves [ 368.091431][ T5729] bond1 (unregistering): Released all slaves [ 368.101094][ T5729] bond2 (unregistering): Released all slaves [ 368.111720][ T5729] bond3 (unregistering): Released all slaves [ 368.121187][ T5729] bond4 (unregistering): Released all slaves [ 368.131942][ T5729] bond5 (unregistering): Released all slaves [ 368.233339][T23078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6306'. [ 368.242479][T23078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6306'. [ 368.268756][ T5729] hsr_slave_0: left promiscuous mode [ 368.276211][ T5729] hsr_slave_1: left promiscuous mode [ 368.282311][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.289878][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.299383][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.306847][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.319552][ T5729] veth1_macvtap: left promiscuous mode [ 368.325137][ T5729] veth0_macvtap: left promiscuous mode [ 368.330736][ T5729] veth1_vlan: left promiscuous mode [ 368.336048][ T5729] veth0_vlan: left promiscuous mode [ 368.336550][T23080] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6307'. [ 368.459022][ T5729] team_slave_1 (unregistering): left promiscuous mode [ 368.472619][ T5729] team0 (unregistering): Port device team_slave_1 removed [ 368.483876][ T5729] team_slave_0 (unregistering): left promiscuous mode [ 368.491249][ T5729] team0 (unregistering): Port device team_slave_0 removed [ 368.534212][T23099] loop4: detected capacity change from 0 to 512 [ 368.541729][T23099] EXT4-fs: Ignoring removed i_version option [ 368.551126][T23099] EXT4-fs (loop4): 1 truncate cleaned up [ 368.632828][T23104] loop4: detected capacity change from 0 to 512 [ 368.660765][T23104] EXT4-fs (loop4): 1 truncate cleaned up [ 368.669652][T22987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.680248][T22987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.689563][T22987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.715609][T22987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.757069][T22987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.769899][T22987] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.780533][ T3168] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.787627][ T3168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.813752][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.820860][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.895359][T23130] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6317'. [ 368.920891][T22987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.025192][T22987] veth0_vlan: entered promiscuous mode [ 369.034574][T22987] veth1_vlan: entered promiscuous mode [ 369.062533][T22987] veth0_macvtap: entered promiscuous mode [ 369.084532][T22987] veth1_macvtap: entered promiscuous mode [ 369.140669][T23143] netlink: 'syz.0.6320': attribute type 10 has an invalid length. [ 369.148554][T23143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6320'. [ 369.172401][T22987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.182926][T22987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.201544][T22987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.212683][T22987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.223155][T22987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.234765][T22987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.245627][T22987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.254503][T22987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.263235][T22987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.272001][T22987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.333411][T23152] loop3: detected capacity change from 0 to 512 [ 369.346959][T23152] EXT4-fs: Ignoring removed i_version option [ 369.356136][T23152] EXT4-fs (loop3): 1 truncate cleaned up [ 369.666091][T23169] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6328'. [ 369.992965][T23199] loop0: detected capacity change from 0 to 512 [ 370.002497][T23199] EXT4-fs: Ignoring removed i_version option [ 370.022035][T23199] EXT4-fs (loop0): 1 truncate cleaned up [ 370.098232][T23204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6338'. [ 370.562018][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 370.562032][ T29] audit: type=1326 audit(1719523321.465:16704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23238 comm="syz.4.6347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103d84db29 code=0x0 [ 370.635198][ T29] audit: type=1326 audit(1719523321.545:16705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23242 comm="syz.3.6349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c18198b29 code=0x0 [ 370.833818][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.860621][T23254] __nla_validate_parse: 1 callbacks suppressed [ 370.860635][T23254] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6352'. [ 371.066576][T23258] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6354'. [ 371.111355][T23270] loop0: detected capacity change from 0 to 128 [ 371.496591][T23288] syzkaller0: entered promiscuous mode [ 371.502237][T23288] syzkaller0: entered allmulticast mode [ 371.518873][T23288] syzkaller0: create flow: hash 3213045302 index 1 [ 371.529057][T23287] syzkaller0: delete flow: hash 3213045302 index 1 [ 371.610565][T23292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6362'. [ 371.645781][T23292] syzkaller0: entered promiscuous mode [ 371.651449][T23292] syzkaller0: entered allmulticast mode [ 371.754292][T23300] loop1: detected capacity change from 0 to 164 [ 371.762625][T23300] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 371.773702][T23300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=239 sclass=netlink_route_socket pid=23300 comm=syz.1.6366 [ 371.939484][T23307] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6368'. [ 372.038883][ T29] audit: type=1326 audit(1719523322.945:16706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.4.6371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103d84db29 code=0x0 [ 372.355451][T23334] loop0: detected capacity change from 0 to 2048 [ 372.405986][T23334] bridge0: port 1(vlan0) entered disabled state [ 372.491920][T23334] 9pnet: p9_errstr2errno: server reported unknown error @íÎhQI¸¥Šte [ 372.553867][T23328] chnl_net:caif_netlink_parms(): no params data found [ 372.621198][T23328] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.628361][T23328] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.636268][T23328] bridge_slave_0: entered allmulticast mode [ 372.649175][T23328] bridge_slave_0: entered promiscuous mode [ 372.656308][T23328] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.663396][T23328] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.671922][T23328] bridge_slave_1: entered allmulticast mode [ 372.685270][T23328] bridge_slave_1: entered promiscuous mode [ 372.738777][T23370] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6381'. [ 372.757066][T23328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.768588][T23328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.800827][T23328] team0: Port device team_slave_0 added [ 372.819647][T23328] team0: Port device team_slave_1 added [ 372.852882][T23328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.859850][T23328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.885783][T23328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.898496][T23328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.905566][T23328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.931643][T23328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.962748][T23328] hsr_slave_0: entered promiscuous mode [ 372.969304][T23328] hsr_slave_1: entered promiscuous mode [ 372.975111][T23328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.982641][T23328] Cannot create hsr debugfs directory [ 373.078633][T23328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.119273][T23328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.181758][T23328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.228382][T23328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.292396][T23328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.301714][T23328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.310816][T23328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.321054][T23328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.336945][T23328] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.344027][T23328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.351270][T23328] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.358447][T23328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.392281][T23328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.406382][ T3163] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.414824][ T3163] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.436946][T23328] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.456239][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.463367][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.472443][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.479573][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.491676][ T29] audit: type=1400 audit(1719523324.395:16707): avc: denied { write } for pid=23400 comm="syz.2.6392" name="usbmon3" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 373.521302][T23328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.531917][T23328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.601649][T23328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.674366][T23328] veth0_vlan: entered promiscuous mode [ 373.682266][T23328] veth1_vlan: entered promiscuous mode [ 373.699225][T23328] veth0_macvtap: entered promiscuous mode [ 373.706736][T23328] veth1_macvtap: entered promiscuous mode [ 373.720588][T23328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.731155][T23328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.741210][T23328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.751679][T23328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.762432][T23328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.774547][T23328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.785064][T23328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.794984][T23328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.805479][T23328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.818177][T23328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.830387][ T29] audit: type=1326 audit(1719523324.735:16708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23417 comm="syz.4.6395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103d84db29 code=0x0 [ 373.854427][T23328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.863134][T23328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.871902][T23328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.880977][T23328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.357726][T23459] loop3: detected capacity change from 0 to 128 [ 374.366903][T23459] ext4 filesystem being mounted at /root/syzkaller.KJzqqB/290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.714128][ T29] audit: type=1326 audit(1719523325.615:16709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23464 comm="syz.3.6412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c18198b29 code=0x0 [ 374.792222][T23471] IPVS: Error connecting to the multicast addr [ 374.969203][ T5725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.029961][ T29] audit: type=1326 audit(1719523325.935:16710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23487 comm="syz.0.6424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b8d532b29 code=0x0 [ 375.060509][ T5725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.127638][ T5725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.174442][ T5725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.233764][T23494] chnl_net:caif_netlink_parms(): no params data found [ 375.281275][T23494] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.288482][T23494] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.296202][T23494] bridge_slave_0: entered allmulticast mode [ 375.303629][T23494] bridge_slave_0: entered promiscuous mode [ 375.316415][T23494] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.323509][T23494] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.331151][T23494] bridge_slave_1: entered allmulticast mode [ 375.337641][T23494] bridge_slave_1: entered promiscuous mode [ 375.363281][T23494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.377453][ T5725] bridge_slave_1: left allmulticast mode [ 375.383099][ T5725] bridge_slave_1: left promiscuous mode [ 375.388841][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.399178][ T5725] bridge_slave_0: left allmulticast mode [ 375.404955][ T5725] bridge_slave_0: left promiscuous mode [ 375.410614][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.438601][T23526] loop3: detected capacity change from 0 to 2048 [ 375.517615][ T5725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.528334][ T5725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.538002][T23526] loop3: detected capacity change from 0 to 1024 [ 375.539488][ T5725] bond0 (unregistering): Released all slaves [ 375.553253][T23494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.570115][T23526] EXT4-fs mount: 42 callbacks suppressed [ 375.570128][T23526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.589756][T23494] team0: Port device team_slave_0 added [ 375.601214][T23494] team0: Port device team_slave_1 added [ 375.620158][T23494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.627138][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.643977][T23526] loop3: detected capacity change from 1024 to 96 [ 375.653184][T23494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.666835][T23530] bio_check_eod: 2 callbacks suppressed [ 375.666847][T23530] syz.3.6431: attempt to access beyond end of device [ 375.666847][T23530] loop3: rw=34817, sector=224, nr_sectors = 120 limit=96 [ 375.670911][T23494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.691034][T23530] syz.3.6431: attempt to access beyond end of device [ 375.691034][T23530] loop3: rw=2051, sector=320, nr_sectors = 32 limit=96 [ 375.696028][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.696057][T23494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.738720][T23530] EXT4-fs (loop3): discard request in group:0 block:10 count:16 failed with -5 [ 375.755232][T23530] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 375.763391][T23530] syz.3.6431: attempt to access beyond end of device [ 375.763391][T23530] loop3: rw=2051, sector=224, nr_sectors = 96 limit=96 [ 375.776911][T23530] EXT4-fs (loop3): discard request in group:0 block:7 count:48 failed with -5 [ 375.785839][T23530] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 375.795975][ T5725] hsr_slave_0: left promiscuous mode [ 375.801939][ T5725] hsr_slave_1: left promiscuous mode [ 375.809680][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.813204][T18544] syz-executor: attempt to access beyond end of device [ 375.813204][T18544] loop3: rw=2051, sector=160, nr_sectors = 32 limit=96 [ 375.817133][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.831403][T18544] EXT4-fs (loop3): discard request in group:0 block:5 count:16 failed with -5 [ 375.847227][T18544] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 375.857205][T18544] syz-executor: attempt to access beyond end of device [ 375.857205][T18544] loop3: rw=2051, sector=192, nr_sectors = 32 limit=96 [ 375.857829][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.871127][T18544] EXT4-fs (loop3): discard request in group:0 block:6 count:16 failed with -5 [ 375.878395][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.889179][T18544] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 375.906705][T18544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.916195][ T5725] veth1_macvtap: left promiscuous mode [ 375.921732][ T5725] veth0_macvtap: left promiscuous mode [ 375.921938][T23527] kmmpd-loop3: attempt to access beyond end of device [ 375.921938][T23527] loop3: rw=14337, sector=128, nr_sectors = 2 limit=96 [ 375.927246][ T5725] veth1_vlan: left promiscuous mode [ 375.940733][T23527] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 375.946012][ T5725] veth0_vlan: left promiscuous mode [ 376.061546][ T5725] team0 (unregistering): Port device team_slave_1 removed [ 376.071909][ T5725] team0 (unregistering): Port device team_slave_0 removed [ 376.165599][T23547] loop0: detected capacity change from 0 to 256 [ 376.173081][T23547] FAT-fs (loop0): Unrecognized mount option "*mask=00000000000000000000000" or missing value [ 376.192776][T23494] hsr_slave_0: entered promiscuous mode [ 376.198752][T23494] hsr_slave_1: entered promiscuous mode [ 376.208756][T23494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.216784][T23494] Cannot create hsr debugfs directory [ 376.248033][T23552] loop0: detected capacity change from 0 to 512 [ 376.256351][T23551] loop4: detected capacity change from 0 to 2048 [ 376.257829][T23552] EXT4-fs: Ignoring removed i_version option [ 376.265615][T23551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.278769][T23551] EXT4-fs: Ignoring removed nobh option [ 376.293805][T23552] EXT4-fs (loop0): 1 truncate cleaned up [ 376.300102][T23552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.319176][T23551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.343584][T23551] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.6439: bg 0: block 2: invalid block bitmap [ 376.356300][T23551] EXT4-fs (loop4): Remounting filesystem read-only [ 376.362922][T23551] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1599: inode #18: comm syz.4.6439: cleanup dec ref error -117 [ 376.363704][T17215] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.385859][T23551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6439'. [ 376.431496][T18776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.474536][ T29] audit: type=1326 audit(1719523327.385:16711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23559 comm="syz.3.6442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c18198b29 code=0x0 [ 376.680871][T23494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.689630][T23494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.693502][T23584] loop0: detected capacity change from 0 to 2048 [ 376.704842][T23494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.713698][T23494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.724021][T23584] GPT:first_usable_lbas don't match. [ 376.729378][T23584] GPT:34 != 290 [ 376.732917][T23584] GPT: Use GNU Parted to correct GPT errors. [ 376.739120][T23584] loop0: p1 p2 p3 [ 376.763947][T23494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.776948][T23494] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.788632][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.795726][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.808638][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.815795][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.867547][T23494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.877953][T23494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.931816][T23494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.964558][T23597] loop1: detected capacity change from 0 to 512 [ 376.972001][T23597] EXT4-fs: Ignoring removed i_version option [ 376.980799][T23597] EXT4-fs (loop1): 1 truncate cleaned up [ 376.987181][T23597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.003414][T23494] veth0_vlan: entered promiscuous mode [ 377.013061][T23494] veth1_vlan: entered promiscuous mode [ 377.029795][T23494] veth0_macvtap: entered promiscuous mode [ 377.037915][T23494] veth1_macvtap: entered promiscuous mode [ 377.045651][T23328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.061208][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.071544][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.086530][T23494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.097134][T23494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.107117][T23494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.117676][T23494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.129146][T23494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.141573][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.151980][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.168876][T23494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.179373][T23494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.189258][T23494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.200161][T23494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.211059][T23494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.221660][T23494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.230584][T23494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.239594][T23494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.248420][T23494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.283453][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.293837][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.347854][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.358216][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.417263][T23628] loop4: detected capacity change from 0 to 128 [ 377.438849][ T40] vlan0: left allmulticast mode [ 377.443818][ T40] vlan0: left promiscuous mode [ 377.448801][ T40] bridge0: port 1(vlan0) entered disabled state [ 377.463097][T23637] loop2: detected capacity change from 0 to 512 [ 377.486381][T23637] EXT4-fs (loop2): 1 truncate cleaned up [ 377.512289][T23637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.659588][ T40] bond0 (unregistering): left promiscuous mode [ 377.674252][ T40] bond0 (unregistering): Released all slaves [ 377.685447][ T40] bond1 (unregistering): Released all slaves [ 377.700802][ T40] bond2 (unregistering): Released all slaves [ 377.720837][ T40] bond3 (unregistering): Released all slaves [ 377.737153][ T40] bond4 (unregistering): Released all slaves [ 377.753976][ T40] bond5 (unregistering): Released all slaves [ 377.769318][ T40] bond6 (unregistering): Released all slaves [ 377.878831][ T40] hsr_slave_0: left promiscuous mode [ 377.887553][ T40] hsr_slave_1: left promiscuous mode [ 377.900622][ T40] veth1_macvtap: left promiscuous mode [ 377.906167][ T40] veth0_macvtap: left promiscuous mode [ 377.911763][ T40] veth1_vlan: left promiscuous mode [ 377.917153][ T40] veth0_vlan: left promiscuous mode [ 377.930347][T23494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.034781][ T40] wg0 (unregistering): left allmulticast mode [ 378.057804][ T29] audit: type=1326 audit(1719523328.965:16712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23653 comm="syz.2.6467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68bb4c4b29 code=0x0 [ 378.100890][T23606] chnl_net:caif_netlink_parms(): no params data found [ 378.158809][ T29] audit: type=1326 audit(1719523329.065:16713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.4.6468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103d84db29 code=0x0 [ 378.194836][T23606] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.202040][T23606] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.209598][T23606] bridge_slave_0: entered allmulticast mode [ 378.217516][T23606] bridge_slave_0: entered promiscuous mode [ 378.224931][T23606] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.232062][T23606] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.239416][T23606] bridge_slave_1: entered allmulticast mode [ 378.245960][T23606] bridge_slave_1: entered promiscuous mode [ 378.268796][T23606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.282283][T23606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.305406][T23606] team0: Port device team_slave_0 added [ 378.325911][T23606] team0: Port device team_slave_1 added [ 378.376718][T23606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.383708][T23606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.409850][T23606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.421510][T23606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.428568][T23606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.454871][T23606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.496584][T23606] hsr_slave_0: entered promiscuous mode [ 378.509886][T23606] hsr_slave_1: entered promiscuous mode [ 378.519309][T23606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.528551][T23606] Cannot create hsr debugfs directory [ 378.702235][T23694] loop3: detected capacity change from 0 to 512 [ 378.709418][T23694] EXT4-fs: Ignoring removed i_version option [ 378.717361][T23694] EXT4-fs (loop3): 1 truncate cleaned up [ 378.723369][T23694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.760300][T18544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.782290][T23606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 378.791073][T23606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 378.800111][T23606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 378.808833][T23606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 378.835574][T23606] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.842712][T23606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.849982][T23606] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.857026][T23606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.871735][ T3162] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.880813][ T3162] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.933684][T23606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.941406][T23708] loop2: detected capacity change from 0 to 2048 [ 378.961545][T23606] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.972365][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.979485][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.991977][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.999038][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.016659][T23708] GPT:first_usable_lbas don't match. [ 379.021972][T23708] GPT:34 != 290 [ 379.025507][T23708] GPT: Use GNU Parted to correct GPT errors. [ 379.028052][T23606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.031542][T23708] loop2: p1 p2 p3 [ 379.041825][T23606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.101352][T23722] loop3: detected capacity change from 0 to 128 [ 379.114700][T23728] netlink: 'syz.1.6491': attribute type 10 has an invalid length. [ 379.122582][T23728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6491'. [ 379.132538][T23728] bridge0: port 3(vlan0) entered blocking state [ 379.139040][T23728] bridge0: port 3(vlan0) entered disabled state [ 379.145789][T23728] vlan0: entered allmulticast mode [ 379.150905][T23728] veth0_vlan: entered allmulticast mode [ 379.159343][T23728] vlan0: entered promiscuous mode [ 379.165209][T23728] bridge0: port 3(vlan0) entered blocking state [ 379.171536][T23728] bridge0: port 3(vlan0) entered forwarding state [ 379.190356][ T29] audit: type=1326 audit(1719523330.095:16714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 379.213973][ T29] audit: type=1326 audit(1719523330.095:16715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 379.258144][T23606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.325783][ T29] audit: type=1326 audit(1719523330.095:16716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 379.347648][T23606] veth0_vlan: entered promiscuous mode [ 379.349489][ T29] audit: type=1326 audit(1719523330.095:16717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 379.378543][ T29] audit: type=1326 audit(1719523330.095:16718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 379.384488][T23606] veth1_vlan: entered promiscuous mode [ 379.402024][ T29] audit: type=1326 audit(1719523330.095:16719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 379.431075][T23606] veth0_macvtap: entered promiscuous mode [ 379.433772][T23606] veth1_macvtap: entered promiscuous mode [ 379.436943][ T29] audit: type=1326 audit(1719523330.095:16720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23726 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 379.454981][T23606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.476812][T23606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.486911][T23606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.497414][T23606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.507288][T23606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.517738][T23606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.534044][T23606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.548829][T23606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.559477][T23606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.569314][T23606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.579803][T23606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.589653][T23606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.600179][T23606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.612151][T23606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.622716][T23606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.631577][T23606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.640384][T23606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.649161][T23606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.687174][T23751] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 379.699951][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6497'. [ 379.702561][T23751] can0: slcan on ptm1. [ 379.753933][T23750] can0 (unregistered): slcan off ptm1. [ 380.579370][T23788] loop0: detected capacity change from 0 to 2048 [ 380.587205][T23788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.594933][T23788] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 380.657784][T23797] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6509'. [ 380.719986][T23807] netlink: 'syz.4.6513': attribute type 2 has an invalid length. [ 380.727792][T23807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6513'. [ 380.769142][T23817] netlink: 'syz.2.6516': attribute type 2 has an invalid length. [ 380.776998][T23817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6516'. [ 380.791521][T23807] loop4: detected capacity change from 0 to 512 [ 380.801752][T23807] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 380.814260][T23807] EXT4-fs (loop4): 1 orphan inode deleted [ 380.820004][T23807] EXT4-fs (loop4): 1 truncate cleaned up [ 380.826706][T23807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.855835][T23807] EXT4-fs error (device loop4): empty_inline_dir:1829: inode #12: block 7: comm syz.4.6513: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 380.876494][T23807] EXT4-fs warning (device loop4): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 380.925875][T23831] loop2: detected capacity change from 0 to 512 [ 380.936374][T23831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 380.961704][T18776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.004430][T23831] EXT4-fs (loop2): 1 orphan inode deleted [ 381.010252][T23831] EXT4-fs (loop2): 1 truncate cleaned up [ 381.018893][T23831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.037188][T23817] EXT4-fs error (device loop2): empty_inline_dir:1829: inode #12: block 7: comm syz.2.6516: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 381.058228][T23817] EXT4-fs warning (device loop2): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 381.095448][T23494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.204318][T23849] loop0: detected capacity change from 0 to 128 [ 381.729500][T23877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6528'. [ 381.749943][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 381.749983][ T29] audit: type=1400 audit(1719523332.655:16739): avc: denied { append } for pid=23876 comm="syz.3.6529" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 381.826825][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6529'. [ 381.838943][T23884] netlink: 'syz.1.6531': attribute type 10 has an invalid length. [ 381.846951][T23884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6531'. [ 381.855276][T23886] loop0: detected capacity change from 0 to 512 [ 381.863443][T23886] EXT4-fs: Ignoring removed i_version option [ 381.875991][T23886] EXT4-fs (loop0): 1 truncate cleaned up [ 381.886225][ T29] audit: type=1326 audit(1719523332.785:16740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 381.909934][ T29] audit: type=1326 audit(1719523332.785:16741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 381.933517][ T29] audit: type=1326 audit(1719523332.785:16742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 381.957253][ T29] audit: type=1326 audit(1719523332.785:16743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 381.957508][T23886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.980933][ T29] audit: type=1326 audit(1719523332.795:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 382.016568][ T29] audit: type=1326 audit(1719523332.795:16745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 382.040146][ T29] audit: type=1326 audit(1719523332.795:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 382.063776][ T29] audit: type=1326 audit(1719523332.795:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 382.087411][ T29] audit: type=1326 audit(1719523332.795:16748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23883 comm="syz.1.6531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 382.114542][T23606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.212156][T23894] loop3: detected capacity change from 0 to 512 [ 382.344153][T23916] loop2: detected capacity change from 0 to 512 [ 382.352919][T23894] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.6536: corrupted in-inode xattr: invalid ea_ino [ 382.465086][T23894] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.6536: couldn't read orphan inode 12 (err -117) [ 382.481792][T23916] EXT4-fs (loop2): 1 truncate cleaned up [ 382.496712][T23916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.528449][T23894] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.562936][T23894] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 382.564301][T23920] block device autoloading is deprecated and will be removed. [ 382.580837][T23920] syz.4.6541: attempt to access beyond end of device [ 382.580837][T23920] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 382.642782][T23928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6543'. [ 382.665297][T23928] 9pnet_fd: Insufficient options for proto=fd [ 382.678068][T23930] loop3: detected capacity change from 0 to 512 [ 382.699741][T23930] EXT4-fs: Ignoring removed i_version option [ 382.709432][T23930] EXT4-fs (loop3): 1 truncate cleaned up [ 382.715608][T23930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.749717][T23494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.768980][T18544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.812145][T23940] netlink: 'syz.2.6548': attribute type 10 has an invalid length. [ 382.820212][T23940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6548'. [ 382.829985][T23940] bridge0: port 3(vlan0) entered blocking state [ 382.836825][T23940] bridge0: port 3(vlan0) entered disabled state [ 382.847321][T23940] vlan0: entered allmulticast mode [ 382.852450][T23940] veth0_vlan: entered allmulticast mode [ 382.859027][T23940] vlan0: entered promiscuous mode [ 382.864516][T23940] bridge0: port 3(vlan0) entered blocking state [ 382.870807][T23940] bridge0: port 3(vlan0) entered forwarding state [ 382.931539][T23948] loop2: detected capacity change from 0 to 1024 [ 382.941250][T23948] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 382.953117][T23948] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 382.961236][T23948] EXT4-fs (loop2): orphan cleanup on readonly fs [ 382.968797][T23948] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.6550: Freeing blocks not in datazone - block = 0, count = 4096 [ 382.982391][T23948] EXT4-fs (loop2): 1 orphan inode deleted [ 382.988699][T23948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.015535][T23494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.054064][T23955] netlink: 'syz.0.6554': attribute type 2 has an invalid length. [ 383.061874][T23955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6554'. [ 383.110444][T23955] loop0: detected capacity change from 0 to 512 [ 383.131431][T23966] loop1: detected capacity change from 0 to 128 [ 383.156359][T23955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 383.180686][T23955] EXT4-fs (loop0): 1 orphan inode deleted [ 383.186494][T23955] EXT4-fs (loop0): 1 truncate cleaned up [ 383.195171][T23955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.210634][T23955] EXT4-fs error (device loop0): empty_inline_dir:1829: inode #12: block 7: comm syz.0.6554: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 383.230913][T23955] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 383.263848][T23606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.555158][T23983] netlink: 'syz.4.6560': attribute type 2 has an invalid length. [ 383.563040][T23983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6560'. [ 383.598476][T23983] loop4: detected capacity change from 0 to 512 [ 383.605970][T23983] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 383.618003][T23983] EXT4-fs (loop4): 1 orphan inode deleted [ 383.623782][T23983] EXT4-fs (loop4): 1 truncate cleaned up [ 383.630483][T23983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.645446][T23983] EXT4-fs error (device loop4): empty_inline_dir:1829: inode #12: block 7: comm syz.4.6560: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 383.664747][T23983] EXT4-fs warning (device loop4): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 383.688729][T18776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.804411][T23995] loop4: detected capacity change from 0 to 1024 [ 383.812066][T23995] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 383.824674][T23995] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 383.833123][T23995] EXT4-fs (loop4): orphan cleanup on readonly fs [ 383.840473][T23995] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.6563: Freeing blocks not in datazone - block = 0, count = 4096 [ 383.855114][T23995] EXT4-fs (loop4): 1 orphan inode deleted [ 383.861354][T23995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.885577][T18776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.230908][T24012] netlink: 'syz.0.6567': attribute type 2 has an invalid length. [ 384.238697][T24012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6567'. [ 384.306079][T24014] team_slave_0: entered promiscuous mode [ 384.311764][T24014] team_slave_1: entered promiscuous mode [ 384.324929][T24014] macvtap1: entered promiscuous mode [ 384.330240][T24014] team0: entered promiscuous mode [ 384.342922][T24012] loop0: detected capacity change from 0 to 512 [ 384.344025][T24014] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 384.358236][T24014] team0: Device macvtap1 is already an upper device of the team interface [ 384.362383][T24012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 384.378362][T24014] team0: left promiscuous mode [ 384.383504][T24014] team_slave_0: left promiscuous mode [ 384.388953][T24014] team_slave_1: left promiscuous mode [ 384.396253][T24012] EXT4-fs (loop0): 1 orphan inode deleted [ 384.402056][T24012] EXT4-fs (loop0): 1 truncate cleaned up [ 384.408224][T24012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.422454][T24012] EXT4-fs error (device loop0): empty_inline_dir:1829: inode #12: block 7: comm syz.0.6567: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 384.441990][T24023] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 384.442718][T24012] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 384.479067][T23606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.063313][T24049] netlink: 'syz.4.6578': attribute type 10 has an invalid length. [ 385.071246][T24049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6578'. [ 385.309058][ T5729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.319474][ T5729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.373285][ T5729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.383700][ T5729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.414543][T24064] team_slave_0: entered promiscuous mode [ 385.420227][T24064] team_slave_1: entered promiscuous mode [ 385.427023][T24064] macvtap1: entered promiscuous mode [ 385.432416][T24064] team0: entered promiscuous mode [ 385.438636][T24064] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 385.446761][T24064] team0: Device macvtap1 is already an upper device of the team interface [ 385.456575][T24064] team0: left promiscuous mode [ 385.461598][T24064] team_slave_0: left promiscuous mode [ 385.466983][T24064] team_slave_1: left promiscuous mode [ 385.487114][ T5729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.497480][ T5729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.548923][ T5729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.559596][ T5729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.587114][T24054] chnl_net:caif_netlink_parms(): no params data found [ 385.638788][T24054] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.645998][T24054] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.654786][T24054] bridge_slave_0: entered allmulticast mode [ 385.661428][T24054] bridge_slave_0: entered promiscuous mode [ 385.677079][ T5729] vlan0: left allmulticast mode [ 385.681974][ T5729] veth0_vlan: left allmulticast mode [ 385.687310][ T5729] vlan0: left promiscuous mode [ 385.692245][ T5729] bridge0: port 2(vlan0) entered disabled state [ 385.700757][ T5729] macvlan0: left allmulticast mode [ 385.706062][ T5729] veth1_vlan: left allmulticast mode [ 385.711429][ T5729] macvlan0: left promiscuous mode [ 385.716625][ T5729] bridge0: port 1(macvlan0) entered disabled state [ 385.905804][ T5729] bond0 (unregistering): left promiscuous mode [ 385.912389][ T5729] bond0 (unregistering): Released all slaves [ 385.921781][ T5729] bond1 (unregistering): Released all slaves [ 385.930225][ T5729] bond2 (unregistering): Released all slaves [ 385.939164][ T5729] bond3 (unregistering): Released all slaves [ 385.948749][ T5729] bond4 (unregistering): Released all slaves [ 385.957673][ T5729] bond5 (unregistering): Released all slaves [ 385.967928][ T5729] bond6 (unregistering): Released all slaves [ 385.976720][ T5729] bond7 (unregistering): Released all slaves [ 385.986396][ T5729] bond8 (unregistering): Released all slaves [ 385.995266][ T5729] bond9 (unregistering): Released all slaves [ 386.004482][ T5729] bond10 (unregistering): Released all slaves [ 386.012704][T24054] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.019814][T24054] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.027271][T24054] bridge_slave_1: entered allmulticast mode [ 386.033627][T24054] bridge_slave_1: entered promiscuous mode [ 386.040725][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6587'. [ 386.060988][T24054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.071733][T24054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.092753][T24054] team0: Port device team_slave_0 added [ 386.100451][T24054] team0: Port device team_slave_1 added [ 386.134114][ T5729] team0: left promiscuous mode [ 386.149170][ T5729] hsr_slave_0: left promiscuous mode [ 386.157277][ T5729] hsr_slave_1: left promiscuous mode [ 386.165498][ T5729] veth1_macvtap: left promiscuous mode [ 386.171048][ T5729] veth0_macvtap: left promiscuous mode [ 386.176606][ T5729] veth1_vlan: left promiscuous mode [ 386.181855][ T5729] veth0_vlan: left promiscuous mode [ 386.312468][T24054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.319594][T24054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.345533][T24054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.357055][T24054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.364213][T24054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.390184][T24054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.403568][T24095] veth0_to_bond: entered promiscuous mode [ 386.412523][T24095] veth0_to_bond: left promiscuous mode [ 386.452651][T24054] hsr_slave_0: entered promiscuous mode [ 386.460660][T24054] hsr_slave_1: entered promiscuous mode [ 386.467611][T24054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.479642][T24109] netlink: 'syz.4.6593': attribute type 9 has an invalid length. [ 386.486209][T24054] Cannot create hsr debugfs directory [ 386.782617][T24145] loop2: detected capacity change from 0 to 512 [ 386.791069][T24145] EXT4-fs (loop2): 1 truncate cleaned up [ 386.799159][T24145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.817685][T24054] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.827446][T24054] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.837774][T24054] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.853984][T24054] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 386.896990][T24054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.911654][T24054] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.927494][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.934694][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.948020][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.955158][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.984349][T24054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.994784][T24054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.061255][T24054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.115219][T23494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.166555][T24054] veth0_vlan: entered promiscuous mode [ 387.176040][T24054] veth1_vlan: entered promiscuous mode [ 387.193513][T24054] veth0_macvtap: entered promiscuous mode [ 387.203058][T24054] veth1_macvtap: entered promiscuous mode [ 387.214422][T24054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.223334][T24181] __nla_validate_parse: 4 callbacks suppressed [ 387.223346][T24181] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6609'. [ 387.224971][T24054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.231202][T24181] netlink: 'syz.2.6609': attribute type 9 has an invalid length. [ 387.240287][T24054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.249932][T24181] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6609'. [ 387.249946][T24181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6609'. [ 387.286686][T24054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.296644][T24054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.307206][T24054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.317162][T24054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.327767][T24054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.339799][T24054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.351698][T24054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.362347][T24054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.372301][T24054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.382842][T24054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.392820][T24054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.403614][T24054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.413674][T24054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.424242][T24054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.437294][T24054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.448996][T24054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.457994][T24054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.466901][T24054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.476605][T24054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.629827][T24191] netlink: 'syz.3.6581': attribute type 2 has an invalid length. [ 387.637739][T24191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6581'. [ 387.746107][T24191] loop3: detected capacity change from 0 to 512 [ 387.766100][T24191] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 387.783084][T24191] EXT4-fs (loop3): 1 orphan inode deleted [ 387.788955][T24191] EXT4-fs (loop3): 1 truncate cleaned up [ 387.796289][T24191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.810873][T24191] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz.3.6581: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 387.833512][T24191] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 387.878763][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.956006][T24211] loop1: detected capacity change from 0 to 1024 [ 387.964634][T24211] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 387.975509][T24211] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 387.984622][T24211] EXT4-fs (loop1): orphan cleanup on readonly fs [ 387.991346][T24211] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.6619: Freeing blocks not in datazone - block = 0, count = 4096 [ 388.006974][T24211] EXT4-fs (loop1): 1 orphan inode deleted [ 388.013094][T24211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 388.028453][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 388.028465][ T29] audit: type=1326 audit(1719523338.935:16859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.058405][ T29] audit: type=1326 audit(1719523338.935:16860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.096797][T23328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.113299][ T29] audit: type=1326 audit(1719523338.995:16861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.137445][ T29] audit: type=1326 audit(1719523338.995:16862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.161516][ T29] audit: type=1326 audit(1719523338.995:16863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.185300][ T29] audit: type=1326 audit(1719523338.995:16864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.209053][ T29] audit: type=1326 audit(1719523338.995:16865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.232671][ T29] audit: type=1326 audit(1719523338.995:16866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.256285][ T29] audit: type=1326 audit(1719523338.995:16867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.280099][ T29] audit: type=1326 audit(1719523338.995:16868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24210 comm="syz.1.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 388.339695][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6622'. [ 388.367399][ T5735] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.420654][ T5735] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.489481][ T5735] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.546906][ T5735] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.598102][T24256] loop1: detected capacity change from 0 to 1024 [ 388.616161][T24256] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 388.642002][T24256] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 388.654786][T24256] EXT4-fs (loop1): orphan cleanup on readonly fs [ 388.664175][T24256] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.6631: Freeing blocks not in datazone - block = 0, count = 4096 [ 388.679285][ T5735] vlan0: left allmulticast mode [ 388.684198][ T5735] veth0_vlan: left allmulticast mode [ 388.689578][ T5735] vlan0: left promiscuous mode [ 388.694541][ T5735] bridge0: port 1(vlan0) entered disabled state [ 388.702213][T24256] EXT4-fs (loop1): 1 orphan inode deleted [ 388.710088][T24256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 388.735588][T23328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.906373][ T5735] bond0 (unregistering): Released all slaves [ 388.915839][ T5735] bond1 (unregistering): Released all slaves [ 388.924612][ T5735] bond2 (unregistering): Released all slaves [ 388.933352][ T5735] bond3 (unregistering): Released all slaves [ 388.942100][ T5735] bond4 (unregistering): Released all slaves [ 388.954135][T24238] chnl_net:caif_netlink_parms(): no params data found [ 389.001060][T24238] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.008324][T24238] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.015652][T24238] bridge_slave_0: entered allmulticast mode [ 389.022219][T24238] bridge_slave_0: entered promiscuous mode [ 389.029343][T24238] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.036542][T24238] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.045888][T24238] bridge_slave_1: entered allmulticast mode [ 389.052622][T24238] bridge_slave_1: entered promiscuous mode [ 389.079486][T24238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.106908][T24238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.133801][T24238] team0: Port device team_slave_0 added [ 389.143476][T24238] team0: Port device team_slave_1 added [ 389.175307][T24238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.182462][T24238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.208455][T24238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.277332][ T5735] hsr_slave_0: left promiscuous mode [ 389.283120][ T5735] hsr_slave_1: left promiscuous mode [ 389.291015][ T5735] veth1_macvtap: left promiscuous mode [ 389.296572][ T5735] veth0_macvtap: left promiscuous mode [ 389.302158][ T5735] veth1_vlan: left promiscuous mode [ 389.307377][ T5735] veth0_vlan: left promiscuous mode [ 389.520026][T24279] loop2: detected capacity change from 0 to 512 [ 389.571307][T24279] EXT4-fs (loop2): 1 truncate cleaned up [ 389.614448][T24279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.732988][T24238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.739992][T24238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.766004][T24238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.815644][T24238] hsr_slave_0: entered promiscuous mode [ 389.838495][T24238] hsr_slave_1: entered promiscuous mode [ 389.852316][T24238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.866602][T24238] Cannot create hsr debugfs directory [ 389.899385][T23494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.070798][T24296] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6641'. [ 390.100298][T24310] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6643'. [ 390.111206][T24310] netlink: 'syz.3.6643': attribute type 9 has an invalid length. [ 390.119069][T24310] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6643'. [ 390.128211][T24310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6643'. [ 390.245774][T24238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.255477][T24238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.264931][T24238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.277581][T24238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.319596][T24238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.334308][T24238] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.344043][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.351233][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.362779][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.369982][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.450756][T24238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.568507][T24238] veth0_vlan: entered promiscuous mode [ 390.579494][T24238] veth1_vlan: entered promiscuous mode [ 390.596994][T24238] veth0_macvtap: entered promiscuous mode [ 390.604686][T24238] veth1_macvtap: entered promiscuous mode [ 390.616608][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.627177][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.637115][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.647636][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.657494][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.667988][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.678383][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.689003][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.698806][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.709321][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.720657][T24238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.729650][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.740186][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.750104][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.760524][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.770366][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.780790][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.790602][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.801086][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.811104][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.821924][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.833093][T24238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.847743][T24238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.856511][T24238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.865451][T24238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.874420][T24238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.933502][T24344] netlink: 'syz.4.6627': attribute type 2 has an invalid length. [ 390.941450][T24344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6627'. [ 390.992599][T24344] loop4: detected capacity change from 0 to 512 [ 391.001775][T24344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 391.062192][T24344] EXT4-fs (loop4): 1 orphan inode deleted [ 391.068148][T24344] EXT4-fs (loop4): 1 truncate cleaned up [ 391.076920][T24344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.122328][T24344] EXT4-fs error (device loop4): empty_inline_dir:1829: inode #12: block 7: comm syz.4.6627: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 391.172906][T24344] EXT4-fs warning (device loop4): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 391.214550][T24238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.981892][T24429] netlink: 'syz.1.6668': attribute type 10 has an invalid length. [ 392.989791][T24429] __nla_validate_parse: 2 callbacks suppressed [ 392.989815][T24429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6668'. [ 393.034051][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 393.034068][ T29] audit: type=1326 audit(1719523343.935:16919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.063859][ T29] audit: type=1326 audit(1719523343.935:16920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.087632][ T29] audit: type=1326 audit(1719523343.935:16921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.111244][ T29] audit: type=1326 audit(1719523343.935:16922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.134877][ T29] audit: type=1326 audit(1719523343.935:16923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.158772][ T29] audit: type=1326 audit(1719523343.935:16924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.182399][ T29] audit: type=1326 audit(1719523343.935:16925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.205995][ T29] audit: type=1326 audit(1719523343.935:16926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.229374][ T29] audit: type=1326 audit(1719523343.935:16927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.253014][ T29] audit: type=1326 audit(1719523343.935:16928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a94ac9b29 code=0x7ffc0000 [ 393.517701][T24439] loop4: detected capacity change from 0 to 128 [ 393.868807][T24462] netlink: 'syz.1.6680': attribute type 10 has an invalid length. [ 393.876887][T24462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6680'. [ 393.972515][T24467] 9pnet_fd: Insufficient options for proto=fd [ 394.031448][T24473] netlink: 'syz.1.6683': attribute type 2 has an invalid length. [ 394.039296][T24473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6683'. [ 394.241194][T24473] loop1: detected capacity change from 0 to 512 [ 394.250079][T24473] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 394.314292][T24473] EXT4-fs (loop1): 1 orphan inode deleted [ 394.320097][T24473] EXT4-fs (loop1): 1 truncate cleaned up [ 394.339088][T24473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.356802][T24473] EXT4-fs error (device loop1): empty_inline_dir:1829: inode #12: block 7: comm syz.1.6683: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 394.379036][T24473] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 394.461185][T23328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.480156][T24490] loop3: detected capacity change from 0 to 512 [ 394.492465][T24490] EXT4-fs (loop3): 1 truncate cleaned up [ 394.499495][T24490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.655686][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.720521][T24498] netlink: 'syz.0.6692': attribute type 10 has an invalid length. [ 394.728456][T24498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6692'. [ 394.748000][T24498] bridge0: port 3(vlan0) entered blocking state [ 394.754315][T24498] bridge0: port 3(vlan0) entered disabled state [ 394.761642][T24498] vlan0: entered allmulticast mode [ 394.766853][T24498] veth0_vlan: entered allmulticast mode [ 394.773227][T24498] vlan0: entered promiscuous mode [ 394.779022][T24498] bridge0: port 3(vlan0) entered blocking state [ 394.785434][T24498] bridge0: port 3(vlan0) entered forwarding state [ 394.800131][T24504] 9pnet_fd: Insufficient options for proto=fd [ 394.918516][T24518] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6700'. [ 394.923358][T24521] netlink: 'syz.2.6699': attribute type 2 has an invalid length. [ 394.929053][T24518] netlink: 'syz.3.6700': attribute type 9 has an invalid length. [ 394.935362][T24521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6699'. [ 394.952212][T24518] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6700'. [ 394.961312][T24518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6700'. [ 394.977772][T24521] loop2: detected capacity change from 0 to 512 [ 394.991124][T24521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 395.009419][T24521] EXT4-fs (loop2): 1 orphan inode deleted [ 395.015334][T24521] EXT4-fs (loop2): 1 truncate cleaned up [ 395.022017][T24521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.035552][T24521] EXT4-fs error (device loop2): empty_inline_dir:1829: inode #12: block 7: comm syz.2.6699: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 395.057340][T24521] EXT4-fs warning (device loop2): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 395.077309][T24537] loop3: detected capacity change from 0 to 1024 [ 395.085003][T24537] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.100998][T24537] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 395.109247][T24537] EXT4-fs (loop3): orphan cleanup on readonly fs [ 395.118539][T24537] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.6704: Freeing blocks not in datazone - block = 0, count = 4096 [ 395.149145][T24537] EXT4-fs (loop3): 1 orphan inode deleted [ 395.163061][T24537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.186578][T23494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.233099][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.321998][T24557] netlink: 'syz.3.6708': attribute type 10 has an invalid length. [ 395.329906][T24557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6708'. [ 395.352664][T24557] bridge0: port 3(vlan0) entered blocking state [ 395.359021][T24557] bridge0: port 3(vlan0) entered disabled state [ 395.368954][T24557] vlan0: entered allmulticast mode [ 395.374123][T24557] veth0_vlan: entered allmulticast mode [ 395.386856][T24557] vlan0: entered promiscuous mode [ 395.397735][T24557] bridge0: port 3(vlan0) entered blocking state [ 395.404041][T24557] bridge0: port 3(vlan0) entered forwarding state [ 395.569873][T24576] netlink: 'syz.3.6717': attribute type 2 has an invalid length. [ 395.577718][T24576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6717'. [ 395.609618][T24576] loop3: detected capacity change from 0 to 512 [ 395.617273][T24576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.628507][T24576] EXT4-fs (loop3): 1 orphan inode deleted [ 395.634272][T24576] EXT4-fs (loop3): 1 truncate cleaned up [ 395.640271][T24576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.653400][T24576] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz.3.6717: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 395.672358][T24576] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 395.694059][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.756009][T24586] loop3: detected capacity change from 0 to 1024 [ 395.763699][T24586] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.774601][T24586] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 395.782730][T24586] EXT4-fs (loop3): orphan cleanup on readonly fs [ 395.789392][T24586] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.6719: Freeing blocks not in datazone - block = 0, count = 4096 [ 395.803446][T24586] EXT4-fs (loop3): 1 orphan inode deleted [ 395.809700][T24586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.833252][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.905094][T24591] netlink: 'syz.1.6722': attribute type 10 has an invalid length. [ 396.317175][T24614] netlink: 'syz.0.6730': attribute type 2 has an invalid length. [ 396.347847][T24614] loop0: detected capacity change from 0 to 512 [ 396.355789][T24614] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 396.367519][T24614] EXT4-fs (loop0): 1 orphan inode deleted [ 396.373342][T24614] EXT4-fs (loop0): 1 truncate cleaned up [ 396.376721][T24620] loop2: detected capacity change from 0 to 1024 [ 396.387167][T24614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.401111][T24614] EXT4-fs error (device loop0): empty_inline_dir:1829: inode #12: block 7: comm syz.0.6730: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 396.419917][T24620] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 396.431692][T24614] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 396.447891][T24620] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 396.456186][T24620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 396.463274][T24620] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.6731: Freeing blocks not in datazone - block = 0, count = 4096 [ 396.480181][T24620] EXT4-fs (loop2): 1 orphan inode deleted [ 396.486307][T24620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.502593][T23606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.516632][T23494] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.640861][T24640] netlink: 'syz.2.6739': attribute type 9 has an invalid length. [ 396.725600][T24649] loop0: detected capacity change from 0 to 2048 [ 396.804034][T24657] netlink: 'syz.4.6745': attribute type 2 has an invalid length. [ 396.833379][T24657] loop4: detected capacity change from 0 to 512 [ 396.841341][T24657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 396.843038][T24649] loop0: detected capacity change from 0 to 1024 [ 396.852752][T24657] EXT4-fs (loop4): 1 orphan inode deleted [ 396.863431][T24657] EXT4-fs (loop4): 1 truncate cleaned up [ 396.869479][T24657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.882996][T24649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.885387][T24657] EXT4-fs error (device loop4): empty_inline_dir:1829: inode #12: block 7: comm syz.4.6745: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 396.914082][T24657] EXT4-fs warning (device loop4): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 396.943765][T24649] loop0: detected capacity change from 1024 to 96 [ 396.952936][T24649] syz.0.6741: attempt to access beyond end of device [ 396.952936][T24649] loop0: rw=34817, sector=224, nr_sectors = 120 limit=96 [ 396.966630][T24649] syz.0.6741: attempt to access beyond end of device [ 396.966630][T24649] loop0: rw=2051, sector=320, nr_sectors = 32 limit=96 [ 396.980115][T24649] EXT4-fs (loop0): discard request in group:0 block:10 count:16 failed with -5 [ 396.989224][T24649] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: IO failure [ 396.998864][T24649] syz.0.6741: attempt to access beyond end of device [ 396.998864][T24649] loop0: rw=2051, sector=224, nr_sectors = 96 limit=96 [ 397.012454][T24649] EXT4-fs (loop0): discard request in group:0 block:7 count:48 failed with -5 [ 397.021884][T24649] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: IO failure [ 397.572065][T24685] netlink: 'syz.2.6752': attribute type 9 has an invalid length. [ 397.588366][T23606] syz-executor: attempt to access beyond end of device [ 397.588366][T23606] loop0: rw=2051, sector=160, nr_sectors = 32 limit=96 [ 397.657666][T23606] EXT4-fs (loop0): discard request in group:0 block:5 count:16 failed with -5 [ 397.719860][T23606] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: IO failure [ 397.778868][T23606] syz-executor: attempt to access beyond end of device [ 397.778868][T23606] loop0: rw=2051, sector=192, nr_sectors = 32 limit=96 [ 397.792472][T23606] EXT4-fs (loop0): discard request in group:0 block:6 count:16 failed with -5 [ 397.803862][T23606] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: IO failure [ 397.825865][T24707] netlink: 'syz.4.6759': attribute type 10 has an invalid length. [ 397.826688][T24662] kmmpd-loop0: attempt to access beyond end of device [ 397.826688][T24662] loop0: rw=14337, sector=128, nr_sectors = 2 limit=96 [ 397.834338][T24707] bridge0: port 3(vlan0) entered blocking state [ 397.847177][T24662] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 397.861952][T24707] bridge0: port 3(vlan0) entered disabled state [ 397.869328][T24707] vlan0: entered allmulticast mode [ 397.871561][T24706] loop1: detected capacity change from 0 to 2048 [ 397.874470][T24707] veth0_vlan: entered allmulticast mode [ 397.893026][T24707] vlan0: entered promiscuous mode [ 397.898669][T24707] bridge0: port 3(vlan0) entered blocking state [ 397.905042][T24707] bridge0: port 3(vlan0) entered forwarding state [ 397.977557][T24706] loop1: detected capacity change from 0 to 1024 [ 398.009575][T24715] __nla_validate_parse: 12 callbacks suppressed [ 398.009589][T24715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6761'. [ 398.233989][T24706] loop1: detected capacity change from 1024 to 96 [ 398.363567][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 398.363579][ T29] audit: type=1326 audit(1719523349.265:17124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24730 comm="syz.4.6764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32b1978b29 code=0x0 [ 398.379451][T24735] netlink: 'syz.3.6766': attribute type 2 has an invalid length. [ 398.400837][T24735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6766'. [ 398.436484][T24735] loop3: detected capacity change from 0 to 512 [ 398.444064][T24735] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 398.455742][T24735] EXT4-fs (loop3): 1 orphan inode deleted [ 398.461609][T24735] EXT4-fs (loop3): 1 truncate cleaned up [ 398.468567][T24735] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz.3.6766: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 398.487597][T24735] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 398.545064][T23328] syz-executor: attempt to access beyond end of device [ 398.545064][T23328] loop1: rw=2051, sector=160, nr_sectors = 32 limit=96 [ 398.560515][T23328] EXT4-fs (loop1): discard request in group:0 block:5 count:16 failed with -5 [ 398.569576][T23328] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 398.578801][T23328] syz-executor: attempt to access beyond end of device [ 398.578801][T23328] loop1: rw=2051, sector=192, nr_sectors = 32 limit=96 [ 398.593023][T23328] EXT4-fs (loop1): discard request in group:0 block:6 count:16 failed with -5 [ 398.602223][T23328] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 398.607941][T24746] loop3: detected capacity change from 0 to 512 [ 398.619161][T24717] kmmpd-loop1: attempt to access beyond end of device [ 398.619161][T24717] loop1: rw=14337, sector=128, nr_sectors = 2 limit=96 [ 398.619735][T24746] EXT4-fs (loop3): 1 truncate cleaned up [ 398.632782][T24717] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 398.756304][T24751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6768'. [ 398.804780][T24756] netlink: 'syz.0.6772': attribute type 10 has an invalid length. [ 398.812622][T24756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6772'. [ 398.832296][ T29] audit: type=1326 audit(1719523349.735:17125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 398.862957][ T29] audit: type=1326 audit(1719523349.765:17126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 398.886676][ T29] audit: type=1326 audit(1719523349.765:17127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 398.910231][ T29] audit: type=1326 audit(1719523349.765:17128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 398.933906][ T29] audit: type=1326 audit(1719523349.765:17129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 398.957481][ T29] audit: type=1326 audit(1719523349.765:17130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 398.981069][ T29] audit: type=1326 audit(1719523349.765:17131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 399.005155][ T29] audit: type=1326 audit(1719523349.765:17132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 399.028933][ T29] audit: type=1326 audit(1719523349.765:17133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24755 comm="syz.0.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 399.456891][T24790] loop0: detected capacity change from 0 to 512 [ 399.465631][T24790] EXT4-fs (loop0): 1 truncate cleaned up [ 399.742351][T24817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6792'. [ 399.773090][T24817] loop3: detected capacity change from 0 to 512 [ 399.780520][T24817] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 399.791817][T24817] EXT4-fs (loop3): 1 orphan inode deleted [ 399.797718][T24817] EXT4-fs (loop3): 1 truncate cleaned up [ 399.805287][T24817] EXT4-fs error (device loop3): empty_inline_dir:1829: inode #12: block 7: comm syz.3.6792: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 399.825746][T24817] EXT4-fs warning (device loop3): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 399.904034][T24834] loop1: detected capacity change from 0 to 512 [ 399.912479][T24834] EXT4-fs (loop1): 1 truncate cleaned up [ 399.944703][T24839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6795'. [ 400.061716][T24844] loop1: detected capacity change from 0 to 512 [ 400.070761][T24844] EXT4-fs (loop1): 1 truncate cleaned up [ 400.682051][T24880] validate_nla: 1 callbacks suppressed [ 400.682067][T24880] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 400.695353][T24880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6806'. [ 400.788268][T24880] loop1: detected capacity change from 0 to 512 [ 400.796169][T24880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 400.813097][T24880] EXT4-fs (loop1): 1 orphan inode deleted [ 400.818930][T24880] EXT4-fs (loop1): 1 truncate cleaned up [ 400.838556][T24880] EXT4-fs error (device loop1): empty_inline_dir:1829: inode #12: block 7: comm syz.1.6806: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 400.857616][T24880] EXT4-fs warning (device loop1): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 400.879253][T24897] loop0: detected capacity change from 0 to 128 [ 401.312338][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6822'. [ 401.358157][T24957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6823'. [ 401.431422][T24966] loop1: detected capacity change from 0 to 512 [ 401.447899][T24966] EXT4-fs (loop1): 1 truncate cleaned up [ 401.678630][T24973] netlink: 'syz.3.6829': attribute type 10 has an invalid length. [ 401.686597][T24973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6829'. [ 401.763246][T24975] loop1: detected capacity change from 0 to 128 [ 402.328074][T25035] loop1: detected capacity change from 0 to 512 [ 402.345181][T25036] vlan2: entered promiscuous mode [ 402.350390][T25036] dummy0: entered promiscuous mode [ 402.351483][T25035] EXT4-fs (loop1): 1 truncate cleaned up [ 402.355610][T25036] vlan2: entered allmulticast mode [ 402.366406][T25036] dummy0: entered allmulticast mode [ 402.398815][T25036] dummy0: left allmulticast mode [ 402.403933][T25036] dummy0: left promiscuous mode [ 402.413458][T25039] loop4: detected capacity change from 0 to 2048 [ 402.535607][T25044] loop0: detected capacity change from 0 to 1024 [ 402.544299][T25044] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 402.554867][T25044] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 402.562947][T25044] EXT4-fs (loop0): orphan cleanup on readonly fs [ 402.570012][T25044] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm syz.0.6844: Invalid inode table block 0 in block_group 0 [ 402.570636][T25039] loop4: detected capacity change from 0 to 1024 [ 402.591880][T25044] EXT4-fs (loop0): Remounting filesystem read-only [ 402.598862][T25044] EXT4-fs (loop0): 1 truncate cleaned up [ 402.606460][T25047] loop1: detected capacity change from 0 to 128 [ 402.607689][T25044] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 402.654916][T25039] loop4: detected capacity change from 1024 to 96 [ 402.665217][T25039] syz.4.6840: attempt to access beyond end of device [ 402.665217][T25039] loop4: rw=34817, sector=224, nr_sectors = 120 limit=96 [ 402.683577][T25039] syz.4.6840: attempt to access beyond end of device [ 402.683577][T25039] loop4: rw=2051, sector=320, nr_sectors = 32 limit=96 [ 402.699250][T25039] EXT4-fs (loop4): discard request in group:0 block:10 count:16 failed with -5 [ 402.708887][T25039] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: IO failure [ 402.719882][T25039] syz.4.6840: attempt to access beyond end of device [ 402.719882][T25039] loop4: rw=2051, sector=224, nr_sectors = 96 limit=96 [ 402.736442][T25039] EXT4-fs (loop4): discard request in group:0 block:7 count:48 failed with -5 [ 402.746715][T25039] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: IO failure [ 402.947352][T25057] loop1: detected capacity change from 0 to 512 [ 402.957775][T25057] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.965283][T25057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 402.977273][T25057] EXT4-fs (loop1): 1 truncate cleaned up [ 403.059653][T25062] loop2: detected capacity change from 0 to 2048 [ 403.067049][T25062] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 403.079994][T25064] __nla_validate_parse: 3 callbacks suppressed [ 403.080084][T25064] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6847'. [ 403.095393][T25064] netlink: 'syz.3.6847': attribute type 9 has an invalid length. [ 403.103160][T25064] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6847'. [ 403.112253][T25064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6847'. [ 403.131750][T25062] wg2: entered promiscuous mode [ 403.136769][T25062] wg2: entered allmulticast mode [ 403.139788][T24238] syz-executor: attempt to access beyond end of device [ 403.139788][T24238] loop4: rw=2051, sector=160, nr_sectors = 32 limit=96 [ 403.157101][T24238] EXT4-fs (loop4): discard request in group:0 block:5 count:16 failed with -5 [ 403.166290][T24238] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: IO failure [ 403.175583][T24238] syz-executor: attempt to access beyond end of device [ 403.175583][T24238] loop4: rw=2051, sector=192, nr_sectors = 32 limit=96 [ 403.190406][T24238] EXT4-fs (loop4): discard request in group:0 block:6 count:16 failed with -5 [ 403.199400][T24238] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: IO failure [ 403.215519][T25050] kmmpd-loop4: attempt to access beyond end of device [ 403.215519][T25050] loop4: rw=14337, sector=128, nr_sectors = 2 limit=96 [ 403.229060][T25050] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 403.282843][T25080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6848'. [ 403.485098][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 403.491343][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 403.491355][ T29] audit: type=1400 audit(1719523354.395:17176): avc: denied { getopt } for pid=25100 comm="syz.0.6855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 403.577105][T25101] net_ratelimit: 971 callbacks suppressed [ 403.577122][T25101] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 403.634845][ T29] audit: type=1326 audit(1719523354.545:17177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25105 comm="syz.2.6856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68bb4c4b29 code=0x0 [ 403.963024][T25119] loop0: detected capacity change from 0 to 1024 [ 403.970954][T25119] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 403.981888][T25119] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 403.990023][T25119] EXT4-fs (loop0): orphan cleanup on readonly fs [ 403.996604][T25119] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.6859: Freeing blocks not in datazone - block = 0, count = 4096 [ 404.010132][T25119] EXT4-fs (loop0): 1 orphan inode deleted [ 404.020009][ T29] audit: type=1326 audit(1719523354.925:17178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 404.047514][ T29] audit: type=1326 audit(1719523354.925:17179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 404.071531][ T29] audit: type=1326 audit(1719523354.925:17180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 404.095171][ T29] audit: type=1326 audit(1719523354.925:17181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 404.119392][ T29] audit: type=1326 audit(1719523354.925:17182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 404.143009][ T29] audit: type=1326 audit(1719523354.925:17183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 404.166587][ T29] audit: type=1326 audit(1719523354.925:17184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 404.190281][ T29] audit: type=1326 audit(1719523354.925:17185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25118 comm="syz.0.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe7933e2b29 code=0x7ffc0000 [ 404.303019][T25140] loop4: detected capacity change from 0 to 1024 [ 404.311956][T25140] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 404.323444][T25140] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 404.332982][T25140] EXT4-fs (loop4): orphan cleanup on readonly fs [ 404.339536][T25140] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.6866: Freeing blocks not in datazone - block = 0, count = 4096 [ 404.353325][T25140] EXT4-fs (loop4): 1 orphan inode deleted [ 404.410933][T25153] netlink: 'syz.4.6867': attribute type 10 has an invalid length. [ 404.418810][T25153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6867'. [ 404.592414][T25161] loop0: detected capacity change from 0 to 128 [ 404.980345][T25173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6875'. [ 404.992071][T25173] vlan2: entered promiscuous mode [ 404.997202][T25173] dummy0: entered promiscuous mode [ 405.002457][T25173] vlan2: entered allmulticast mode [ 405.007640][T25173] dummy0: entered allmulticast mode [ 405.014717][T25173] dummy0: left allmulticast mode [ 405.019697][T25173] dummy0: left promiscuous mode [ 405.033915][T25175] netlink: 'syz.0.6873': attribute type 4 has an invalid length. [ 405.499840][T25196] loop0: detected capacity change from 0 to 512 [ 405.507149][T25196] EXT4-fs: Ignoring removed i_version option [ 405.514598][T25196] EXT4-fs (loop0): 1 truncate cleaned up [ 405.619435][T25200] loop0: detected capacity change from 0 to 1024 [ 405.627723][T25200] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.639078][T25201] loop2: detected capacity change from 0 to 128 [ 405.641148][T25200] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 405.657414][T25200] EXT4-fs (loop0): orphan cleanup on readonly fs [ 405.664769][T25200] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.6883: Freeing blocks not in datazone - block = 0, count = 4096 [ 405.681394][T25200] EXT4-fs (loop0): 1 orphan inode deleted [ 405.688870][T25200] EXT4-fs mount: 33 callbacks suppressed [ 405.688927][T25200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.735338][T23606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.897348][T23328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.225120][T25244] team_slave_0: entered promiscuous mode [ 406.230812][T25244] team_slave_1: entered promiscuous mode [ 406.253559][T25244] macvtap1: entered promiscuous mode [ 406.258985][T25244] team0: entered promiscuous mode [ 406.265387][T25244] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 406.274000][T25244] team0: Device macvtap1 is already an upper device of the team interface [ 406.285933][T25244] team0: left promiscuous mode [ 406.290983][T25244] team_slave_0: left promiscuous mode [ 406.296503][T25244] team_slave_1: left promiscuous mode [ 406.346584][T25249] loop3: detected capacity change from 0 to 2048 [ 406.425685][T25254] loop4: detected capacity change from 0 to 128 [ 406.448167][T25249] loop3: detected capacity change from 0 to 1024 [ 406.478397][T25249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.544144][T25249] loop3: detected capacity change from 1024 to 96 [ 406.564513][T25249] syz.3.6896: attempt to access beyond end of device [ 406.564513][T25249] loop3: rw=34817, sector=224, nr_sectors = 120 limit=96 [ 406.594404][T25249] syz.3.6896: attempt to access beyond end of device [ 406.594404][T25249] loop3: rw=2051, sector=320, nr_sectors = 32 limit=96 [ 406.627894][T25249] EXT4-fs (loop3): discard request in group:0 block:10 count:16 failed with -5 [ 406.644190][T25249] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 406.652471][T25249] syz.3.6896: attempt to access beyond end of device [ 406.652471][T25249] loop3: rw=2051, sector=224, nr_sectors = 96 limit=96 [ 406.666383][T25249] EXT4-fs (loop3): discard request in group:0 block:7 count:48 failed with -5 [ 406.678567][T25249] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 406.959458][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'. [ 407.016061][T25281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6905'. [ 407.025133][T25281] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6905'. [ 407.034133][T25281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6905'. [ 407.108558][T24054] syz-executor: attempt to access beyond end of device [ 407.108558][T24054] loop3: rw=2051, sector=160, nr_sectors = 32 limit=96 [ 407.129041][T24054] EXT4-fs (loop3): discard request in group:0 block:5 count:16 failed with -5 [ 407.149084][T24054] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 407.170172][T24054] EXT4-fs (loop3): discard request in group:0 block:6 count:16 failed with -5 [ 407.190350][T24054] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 407.204723][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.228041][T25257] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 407.325873][T25293] vlan2: entered promiscuous mode [ 407.330977][T25293] dummy0: entered promiscuous mode [ 407.336312][T25293] vlan2: entered allmulticast mode [ 407.341401][T25293] dummy0: entered allmulticast mode [ 407.349764][T25293] dummy0: left allmulticast mode [ 407.351375][T25295] loop3: detected capacity change from 0 to 512 [ 407.355036][T25293] dummy0: left promiscuous mode [ 407.362298][T25295] EXT4-fs: Ignoring removed oldalloc option [ 407.377707][T25295] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.6910: Failed to acquire dquot type 1 [ 407.389493][T25295] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.6910: Failed to acquire dquot type 1 [ 407.401192][T25295] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6910: bg 0: block 248: padding at end of block bitmap is not set [ 407.416889][T25295] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 407.425990][T25295] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.6910: Failed to acquire dquot type 1 [ 407.438803][T25295] EXT4-fs (loop3): 1 orphan inode deleted [ 407.444980][T25295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.458493][T25295] ext4 filesystem being mounted at /root/syzkaller.iO5U5e/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.533901][T25295] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=25295 comm=syz.3.6910 [ 407.607595][T25302] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz.3.6910: Failed to acquire dquot type 1 [ 407.660399][T25268] ================================================================== [ 407.668492][T25268] BUG: KCSAN: data-race in do_sendfile / do_sendfile [ 407.675158][T25268] [ 407.677460][T25268] write to 0xffff888112770d40 of 8 bytes by task 25265 on cpu 0: [ 407.685152][T25268] do_sendfile+0x781/0x960 [ 407.689549][T25268] __x64_sys_sendfile64+0x110/0x150 [ 407.694728][T25268] x64_sys_call+0x2c9f/0x2d70 [ 407.699388][T25268] do_syscall_64+0xc9/0x1c0 [ 407.703888][T25268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.709779][T25268] [ 407.712087][T25268] write to 0xffff888112770d40 of 8 bytes by task 25268 on cpu 1: [ 407.719876][T25268] do_sendfile+0x753/0x960 [ 407.724278][T25268] __x64_sys_sendfile64+0x110/0x150 [ 407.729472][T25268] x64_sys_call+0x2c9f/0x2d70 [ 407.734188][T25268] do_syscall_64+0xc9/0x1c0 [ 407.738687][T25268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.744571][T25268] [ 407.746875][T25268] value changed: 0x0000000000000000 -> 0x00000000003b0000 [ 407.753963][T25268] [ 407.756268][T25268] Reported by Kernel Concurrency Sanitizer on: [ 407.762412][T25268] CPU: 1 PID: 25268 Comm: syz.2.6900 Not tainted 6.10.0-rc5-syzkaller-00155-g66e55ff12e73 #0 [ 407.772555][T25268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 407.782598][T25268] ================================================================== [ 407.956177][ T5729] vlan0: left allmulticast mode [ 407.961065][ T5729] veth0_vlan: left allmulticast mode [ 407.966474][ T5729] vlan0: left promiscuous mode [ 407.971342][ T5729] bridge0: port 3(vlan0) entered disabled state [ 407.978172][ T5729] bridge_slave_1: left allmulticast mode [ 407.983826][ T5729] bridge_slave_1: left promiscuous mode [ 407.989503][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.997039][ T5729] bridge_slave_0: left allmulticast mode [ 408.002767][ T5729] bridge_slave_0: left promiscuous mode [ 408.008453][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.096857][ T5729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.107361][ T5729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.117700][ T5729] bond0 (unregistering): Released all slaves [ 408.186369][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.226974][ T5729] hsr_slave_0: left promiscuous mode [ 408.232729][ T5729] hsr_slave_1: left promiscuous mode [ 408.238542][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.245972][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.253451][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.260902][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.269643][ T5729] veth1_macvtap: left promiscuous mode [ 408.275138][ T5729] veth0_macvtap: left promiscuous mode [ 408.280655][ T5729] veth1_vlan: left promiscuous mode [ 408.285894][ T5729] veth0_vlan: left promiscuous mode [ 408.361121][ T5729] team0 (unregistering): Port device team_slave_1 removed [ 408.371541][ T5729] team0 (unregistering): Port device team_slave_0 removed