last executing test programs: 9.26015725s ago: executing program 0 (id=3239): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f00000003c0)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}], [{@flag='nolazytime'}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000880)={[{@usrjquota}, {@oldalloc}]}, 0x0, 0x5b8, &(0x7f00000019c0)="$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") sched_setscheduler(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000340), 0x9, 0x629, &(0x7f0000000e80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x65f8, &(0x7f0000000080)={0x0, 0x3614}, &(0x7f0000000140), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003900), 0x1, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, r2, 0x0) r3 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000001540)) 9.251428351s ago: executing program 3 (id=3241): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) socket$pptp(0x18, 0x1, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 9.065719166s ago: executing program 0 (id=3244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="44f9", 0x2, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000dc0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6167e3f12e20b354d9bdd957054d1b01"}]}}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="45aaf2c19b429a915966dd5d21cf564dd9664a75ed832870230ce1d10f0e8ce1fdfb8991953cfa9a89b59faa7907d20828d5bb84b6620481b2aa307f9f3c86d0756fc28b967cd70a91a481a76b0cd1220e5bfdee87cdc608db33e8380d2bd78238a53c040655b9759cdd7cb63dc1fa0953014c9fda170bad2b2e01227515e9c1e4247a237fbde59402c3fcc294563efea7d3c064457b512eb7aa44a8f01b54d886054c16", @ANYRES16=r2, @ANYBLOB="030300000000000000002f000000"], 0x14}}, 0x0) 8.938817527s ago: executing program 0 (id=3247): socket$inet6_udp(0xa, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) pipe(&(0x7f0000000080)) (rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async) shmctl$SHM_LOCK(r1, 0xb) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x7}, 0x48) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000002c0)={0xd4, r3, 0x3d53d6d1ed9228ab, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BEACON_HEAD={0xb4, 0xe, {{{0x0, 0x3}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x6c, {0xb, 0xaf, 0x9, "1fd613640ffc427e17640c8c217923cca3aeaee27beab8a43460545051bc25d9819933ef174db4d67e5cbf74f8d8db5020913d517a8d65a44b172254f818fb89cd620c8c7dd99f454ae87fa68debabf5324f51b3c7a9e1470c9e5157a29b445a55676023f588237a99"}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]}, 0xd4}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000c"], 0xffdd) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x298e, 0x80000003, 0x1, 0x418, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0xd}, 0x2d) (rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0) (rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000079, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) (async) process_madvise(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 8.796842708s ago: executing program 0 (id=3249): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c"], 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c"], 0x38}}, 0x0) socket(0x25, 0x3, 0x101) (async) r0 = socket(0x25, 0x3, 0x101) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000359, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1004400, &(0x7f0000001940), 0x6, 0x587, &(0x7f0000000300)="$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") syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8004}, &(0x7f00000008c0)=0xfe02) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x5}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f00000000c0)) (async) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x7c9ce320e12d300) (async) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x7c9ce320e12d300) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() (async) sync() 8.64524749s ago: executing program 0 (id=3255): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a884d788a89806112405ce811cc3528c13e245075073feaebad2ba4189b5fb06f42a5354f9aadf6970f543a4b56e61b4b8", 0xfdef, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) getuid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xffffff46, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000004c0)=""/78, 0x0, 0x46, 0x0, 0x6}, 0x78) 8.640867631s ago: executing program 0 (id=3256): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0}, 0x90) creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0x14, &(0x7f0000000080)={0x0}}, 0x0) (async) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x16060, 0x0) (async) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x102, 0x0) r4 = syz_io_uring_setup(0x3405, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket(0x0, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r8 = io_uring_setup(0x3538, &(0x7f0000000300)) close(r8) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c71756965742c6e6f646f74732c646f74732c73686f77657865632c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d555495dbc9338294432c6572726f72733d636f6e74696e75652c6e8fd1588d33d83721636173652c636865636b3d7374726963742c646f74732c00"], 0xfd, 0x1bf, &(0x7f0000000680)="$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") (async) read$watch_queue(r7, &(0x7f0000001e00)=""/4096, 0x1000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)) (async) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) 8.361765424s ago: executing program 3 (id=3267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0)=0x5, 0x4) memfd_secret(0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000000000011000000670000002001000000000000", @ANYRES32=0x0, @ANYBLOB="629779816d530d"], 0x28}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$setflags(r7, 0x2, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 8.350650075s ago: executing program 3 (id=3270): syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0xe8, 0x0, 0x40, 0x9b}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a259f892fbf5ab855628b4694c68d035"}]}, 0x6, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41d}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "d332ff04a7389b09213913cde9284ff58bff13ca30c27ea5431860d513f28728591138b391a62b0334a2f8add0ac29f835d1c26787bc8fa09ca77a736024f26c1609ae49420fea52fe572925653413a4c9b638bcc1abb4a11968e8eb3d2a37b047d0fdcc248f242d8ada9c514a6af09b5905608f2955f23f9a0d5e8a4d84e8d632b4cfc598d21c93e483273194ac73d210630d9735b5a58031acbb4d72e76d00f48101d064c3179fdfee8d0c93e845fc1854ba9a819ad14fed2dc545b00afd1f45399b661674104edc701807d8da94"}}, {0xc6, &(0x7f00000004c0)=@string={0xc6, 0x3, "8964d3d5fb6b3b161f6f66608f26661d1e42fe42d35919e7cd18ab98c04c0512a92a8513e66bc61df8ddc1311d3965daed56634ee34d0c34d8796bc79692b031e049567ce8bd4cdb6f4320e1f081ab98215976e7f1abe9956505730da6261b572ecf5ced68931fe1e1b997371619b5d86759bf78cad1cab81d439ef759a329ef2f331fce7f020a91ac72114c648bd4abc1020c29fb8db87575718656f6fea2e06fac8e0fbcba80b9e8753a5c0c88b83a792ea7f2b186e1f50fb15a79d814a8a16332476a"}}]}) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getpgrp(0x0) (async, rerun: 32) openat2(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbc) (async, rerun: 32) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0d03000000000000000003"], 0x14}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x7, 0x6, 0x9, 0x6, 0xfc, "12d6272d26bde65c84f7e58efc0575ba588954", 0x10001, 0x330}) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000230089d7"], 0x14}, 0x1, 0x53000000}, 0x0) (async) recvmsg(r6, &(0x7f0000001e40)={&(0x7f0000002f80)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x200ec0}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xe1, 0x3, 0xfffffff8, 0xf9f15ae8db433f30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x78c, 0x5719bc86}}) 8.297280859s ago: executing program 3 (id=3271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x23d, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xcc, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xc, 0x2, 0x9, 0x0, 0x7fff, 0x4c, 0x3}}, {0xa, 0x2, [0x8, 0x7f, 0xf]}}, {{0x1c, 0x1, {0xe, 0x7, 0x2, 0x4, 0x0, 0x70, 0x6, 0x4}}, {0xc, 0x2, [0x9, 0x7, 0x7000, 0x3]}}, {{0x1c, 0x1, {0x5, 0x0, 0x6, 0x362db4bb, 0x2, 0x4, 0x0, 0x5}}, {0xe, 0x2, [0x101, 0xbf8, 0xfa57, 0x4, 0x5]}}, {{0x1c, 0x1, {0x9, 0x81, 0xfffb, 0x471, 0x0, 0x1000, 0x6cc, 0x4}}, {0xc, 0x2, [0x8, 0xc9ed, 0x9, 0x89]}}]}]}, 0xcc}}, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000180), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r10 = open_tree(r9, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x40801, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r8, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.16467589s ago: executing program 3 (id=3274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1f, 0x2d, 0x6, 0x20, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'gre0\x00', @link_local}) getsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000340), &(0x7f00000003c0)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r6}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x100080, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f00000004c0)='|\x1cy\x12\b\x17AC\xff\xaev\x9b\xf2C\xda\xaa\xf3') ioperm(0x0, 0x0, 0x8000000000008) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000005c83995f000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) 8.063082559s ago: executing program 3 (id=3277): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) sched_setaffinity(0x0, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x2000002, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x89949b0fdfe93ad6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x18, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x8000000, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendto$inet(r2, 0x0, 0x0, 0x24000080, 0x0, 0x0) listen(r2, 0x4000002) 2.542027902s ago: executing program 4 (id=3358): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@dioread_nolock}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@nodiscard}]}, 0x1, 0x562, &(0x7f0000001080)="$eJzs3c1rHOUfAPDvbHb7/vs1hVJURAI9WKndNIkvFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC+Jd7x6L/4B/RUELRUrQg5fIbGbTbbObt26abffzgWmfZ2aSZ77zzPfJMzu7bAADayT7pxDxckR8k0QcbttWjHzjyMp+Sw+vT2ZLEsvLn/6VRJKva+2f5P8fzCsvRcRvX0WcLKxtt76wOFOpVtO5vD7amL0yWl9YPHVptjKdTqeXxycmzrw9Mf7eu+/0LNY3zv/z/Sd3Pzzz9fGl7365f+R2EmfjUL6tPY6ncKO9MhIj+TkpxdkndhzrQWP9JNntA2BbhvI8L0U2BhwutbIeePF9GRHLwIBKtpj/e40X8IJozQNa9/Y9ug9+bjz4YOUGaG38xZXXRmJf897owFLy2J1Rdr873IP2szZ+/fPO7WyJ3r0OAbChGzcj4nSxuHb8S/Lxb/tOb2KfJ9sw/sGzczeb/7zZaf5TWJ3/RIf5z8EOubsdG+d/4X4Pmukqm/+933H+u/rQangor/2vOecrJRcvVdNsbPt/RJyI0t6svt7znDNL95a7bWuf/2VL1n5rLpgfx/3i3sd/ZqrSqDxNzO0e3Ix4peP8N1nt/6RD/2fn4/wm2ziW3nmt27aN499Zyz9FvN6x/x890UrWfz452rweRltXxVp/3zr2e7f2dzv+rP8PrB//cNL+vLa+9TZ+3Pdv2m3bdq//PclnzfKefN21SqMxNxaxJ/l47frxRz/bqrf2z+I/cXz98a/T9b8/Ij7fZPy3jv786vbj31lZ/FNb6v+tF+599MUP3drfXP+/1SydyNdsZvzb7AE+zbkDAAAAAACAflOIiEORFMqr5UKhXF55f8fROFCo1uqNkxdr85enovlZ2eEoFVpPug+3vR9iLH8/bKs+/kR9IiKORMS3Q/ub9fJkrTq128EDAAAAAAAAAAAAAAAAAABAnzjY5fP/mT+GdvvogB3nK79hcG2Y/734piegL/n7D4NL/sPgkv8wuOQ/DC75D4NL/sPgkv8wuOQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NT5c+eyZXnp4fXJrD51dWF+pnb11FRanynPzk+WJ2tzV8rTtdp0NS1P1mY3+n3VWu3K2HjMXxttpPXGaH1h8cJsbf5y48Kl2cp0eiEtPZOoAAAAAAAAAAAAAAAAAAAA4PlSX1icqVSr6VyPCoWI6OkvVFhTyPrtRrFfznOxPw5DoceF3R6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/wIAAP//f14x3A==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0xfffffffffffffffe, 0x0, 0x5}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000001180), 0xfffffffffffffffe, 0x0) 2.373450926s ago: executing program 4 (id=3361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028007000180ffffffff08000140000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x280070d, &(0x7f0000001200)={[{}, {@barrier_val}, {@noacl}, {@errors_remount}, {@quota}, {@nombcache}, {@minixdf}, {@delalloc}, {@grpquota}]}, 0xee, 0x44a, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) io_uring_setup(0x0, &(0x7f0000002340)) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="04000000f5ffffffe0ffaaaaaaaaaaaa89064600002857fa935f247c4032e0000002d70000018903080000000000000090780000000008000000842767d952ef863260a04a74f9480f32a85f7e4fb9a906bf57796ee27dae60b132d7c5cae8dc0b457ee08d8d639bfca6a2764639d31b60b9defd8966dc8641bc30bc0be79f8ab7c90fe515ca4ca6954c13b71c42bd220ec556291e251308"], 0x3a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = fsmount(r5, 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000040)={r8}, 0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f00000010c0)={0x0, 0x855, 0xfc1, 0xcb, 0x4, 0x40, 0x6, 0x10001, {r8, @in6={{0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x6, 0xe, 0xe, 0x9, 0xffffff71}}, &(0x7f0000001180)=0xb0) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x280, 0x280, 0x280, 0x0, 0x280, 0x348, 0x365, 0x350, 0x348, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) getsockopt$bt_hci(r10, 0x84, 0x1a, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[], 0x32600) 2.284001013s ago: executing program 4 (id=3363): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000500)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.561222862s ago: executing program 1 (id=3374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000005c0)={'veth0_to_bridge\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2088002, &(0x7f0000000700)={[{@journal_checksum}, {@oldalloc}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000000}}], [{@obj_role={'obj_role', 0x3d, '^/'}}, {@permit_directio}]}, 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x380c008, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/389], 0x0, 0x2df, &(0x7f0000003740)="$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") socket$inet6_sctp(0xa, 0x0, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f0000000a00)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/78, 0x4e}, 0x9}, {{&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, 0x80, &(0x7f0000001200), 0x0, &(0x7f0000001280)=""/69, 0x45}, 0xb}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/157, 0x9d}], 0x1}, 0x4}], 0x3, 0x2, 0x0) chdir(0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x3, 0xffffffffffffffca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.434390463s ago: executing program 4 (id=3375): socket$inet_sctp(0x2, 0x0, 0x84) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0xfc}}]}]}}}}}}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0xee01, r6) keyctl$setperm(0x5, r5, 0x21081c22) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000042, &(0x7f0000000400), 0x3, 0x4ea, &(0x7f00000006c0)="$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") removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 701.262973ms ago: executing program 1 (id=3381): open(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x1, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000700)={0x0, 0x4c, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000bc9aa8a027ac88b0abf609d0b1229599219ce42f7c81257695570b74ec9b0328aa92ac6ec10f3c95ef9c5a710a4ca5d34d95dc6dd1c85476f8fedd9ef18a51c132b66215ff847101bc20a4d11a144f5a139fe5f38ff4d6416221d3d998f1ae9cc80cb996bd3d8bb8c184aadf0fb4841e6d47842ce9464416d145ea21ebe67d57fac82b7b2b8bb9ac09889af2b9a3d674dbd136d28477acbdd64b486de", @ANYRES16=r1, @ANYBLOB="010000000000000000007e000000"], 0x14}}, 0x0) symlink(&(0x7f0000000680)='.\x00', &(0x7f0000000040)='./file0\x00') unshare(0x22020600) unshare(0x2a020400) ioperm(0x0, 0x2, 0x2) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) timerfd_gettime(0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r6, &(0x7f0000003740)=[{&(0x7f0000001440)="51a60f333b04abed", 0x8}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RLINK(r8, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000797a30000000002c000000030a01020000000000000000010000000900010073797a3000000000090003000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001006f626a72656600000c000280080003400000006fad35570073797a3000000000140000001100010000000000000000000000000a00"/188], 0xbc}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) open$dir(&(0x7f0000000100)='./file0\x00', 0x680141, 0x132) 621.45619ms ago: executing program 1 (id=3382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=@gettaction={0x5c, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x5c}}, 0x0) capget(0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) (async) getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) socket(0x2c, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000600)="d2147c4dd694d4394472542c99be50070fffffdac8267e6e5e2b8f503435f5c8d35800"}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@typedef={0x2}, @func_proto, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@typedef={0x2}, @func_proto, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 582.234933ms ago: executing program 4 (id=3384): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) readv(r0, &(0x7f0000000000), 0x0) 568.991024ms ago: executing program 4 (id=3385): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000500)={0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 455.933013ms ago: executing program 2 (id=3386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1ff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="c6", 0x33fe0}], 0x1}, 0xc0) recvmsg(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001980)=""/4096, 0x22fe0}, {0x0, 0xfffffd37}], 0x2}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000844190000000000006301c0ff000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x10, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x0, 0x8, 0x8, 0x3, 0xfffffffffffffff0, 0x1}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, @exit, @alu={0x4, 0x1, 0x4, 0x4, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x45, &(0x7f0000000280)=""/69, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x1, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[r5], &(0x7f0000000340)=[{0x4, 0x5, 0x1, 0xc}, {0x0, 0x4, 0xa, 0x5}, {0x0, 0x1, 0x4, 0x3}, {0x4, 0x4, 0x6, 0x6}, {0x4, 0x2, 0x9, 0x7}, {0x5, 0x1, 0x10, 0x1}, {0x3, 0x3, 0x10, 0xc}], 0x10, 0x8}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup(r0, &(0x7f0000000940)='syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x0, 0x0, 0x2e0, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0), 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000009c0), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000580)=""/245, 0x4}, 0x20) openat$cgroup_type(r7, &(0x7f0000000980), 0x2, 0x0) 329.526654ms ago: executing program 2 (id=3387): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000c00), 0x1, 0x5de, &(0x7f0000000600)="$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") (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xbe0b}]}}]}, 0x44}}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 329.316354ms ago: executing program 2 (id=3388): sched_setscheduler(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000018c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) 310.272225ms ago: executing program 2 (id=3389): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000bc0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e45c, 0x700000000000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2140408, 0x0, 0xff, 0x0, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) r2 = io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0x0, 0x42, 0x0, 0x0, 0x0, r1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xc, 0x0, 0x0) dup(0xffffffffffffffff) gettid() getpriority(0x1, 0x0) r3 = epoll_create1(0x0) epoll_create1(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0xfffffffffffffffe) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000030000000000000008001e0000040000080012"], 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x80000005}) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) 264.284649ms ago: executing program 1 (id=3390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYRES16=r2, @ANYRES16=r2, @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x9}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0x50}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x8}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_SSID={0x15, 0x34, @random="3f0b566a066b144ed7116281b4073e8504"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x21, 0x34, @random="ac7ccc9f0f0072daab9198413b689e770d8a8d2bce1b90f7d511b18160"}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x44, r8, 0x1, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x11) write(r9, &(0x7f0000000100)="240000001e005f0234fffffffffffff81600"/36, 0x24) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) io_getevents(r10, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r10, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r11 = syz_open_dev$MSR(&(0x7f0000001e00), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) lseek(r11, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r12, &(0x7f00000000c0)={0x11, 0xf8, r14, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r13, &(0x7f0000000100)={0x11, 0x4, r14}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="8200"], 0x0) shutdown(0xffffffffffffffff, 0x0) 197.466725ms ago: executing program 2 (id=3391): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYRESHEX=r1], 0x1, 0x27a, &(0x7f0000000540)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) ioperm(0x0, 0x7fff, 0x15f9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)) r3 = semget$private(0x0, 0x1, 0x0) semop(r3, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) unshare(0x20040400) semtimedop(r3, &(0x7f0000000040)=[{0x1, 0x1, 0x1000}], 0x1, 0x0) unshare(0x800) r4 = semget(0x1, 0x0, 0x412) semtimedop(r4, &(0x7f00000002c0)=[{0x3, 0x2, 0x1000}, {0x3, 0x4, 0x1000}, {0x1, 0x0, 0x800}, {0x4, 0xf, 0x1000}, {0x0, 0x5, 0x800}, {0x0, 0x4001, 0x1000}, {0x3, 0x3, 0x800}, {0x2, 0x3, 0x1000}], 0x8, &(0x7f0000000140)={0x0, 0x3938700}) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x5, 0x2, 0x100, 0x0, 0x1000]) semop(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x2, 0x3000}, {0x0, 0xfffb, 0x1800}, {0x7, 0x1, 0x800}, {0x41267a7d614b340e, 0x66, 0x1800}, {0x1, 0x9, 0x1800}, {0x1, 0xfb, 0xb823744b36ffa8bb}], 0x6) semctl$IPC_RMID(r3, 0x0, 0x0) semget(0x1, 0x1, 0x42) geteuid() unshare(0x20000200) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 172.370856ms ago: executing program 2 (id=3392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, &(0x7f0000010140)='GPL\x00'}, 0x90) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) iopl(0x3) iopl(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32, @ANYBLOB="a011744ec1bdc706e446cda274ecba979c06a95a78912bb963f49eb707f7781501cfefc7c7c06110c792d3bcfd100e374ae93fcba55939433732f3c7a9108447137bc6265eda8eb67505c652aaf9acbd555ab39572a19b7d7d490738e081ab24953c1237c26769d356"], 0x1c}}, 0x0) write$nci(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="6105010303030602046b7f060180fe46fd18176d06801f1f01ad"], 0x1a) socket$packet(0x11, 0x0, 0x300) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r8}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'gre0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) prctl$PR_SET_MM_AUXV(0x2b, 0xc, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@empty, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x0, @in6=@loopback}}, 0xe8) r10 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r10, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x17, &(0x7f0000000140)=0x11, 0x4) 101.762633ms ago: executing program 1 (id=3393): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f00000003c0)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}], [{@flag='nolazytime'}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000880)={[{@usrjquota}, {@oldalloc}]}, 0x0, 0x5b8, &(0x7f00000019c0)="$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") sched_setscheduler(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000340), 0x9, 0x629, &(0x7f0000000e80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x65f8, &(0x7f0000000080)={0x0, 0x3614}, &(0x7f0000000140), &(0x7f0000000100)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003900), 0x1, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x8979) r2 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000001540)) 0s ago: executing program 1 (id=3394): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0xf1}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="01", 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0x6) r4 = dup(0xffffffffffffffff) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, "7efeaba0d609ab064e8a956e3c79c1159927f7"}) write$UHID_INPUT(r4, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): addresses unique to avoid problems! [ 268.183488][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.193926][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.203846][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.214270][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.224100][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.234523][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.244333][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.254872][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.267242][T14486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.274833][T14561] bond0: left promiscuous mode [ 268.283993][T14486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.292750][T14486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.301562][T14486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.310407][T14486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.354485][T14602] loop1: detected capacity change from 0 to 512 [ 268.377703][T14602] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 16: comm syz.1.2796: invalid block [ 268.385477][T14609] loop0: detected capacity change from 0 to 256 [ 268.392044][T14614] loop3: detected capacity change from 0 to 512 [ 268.402104][T14602] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2796: couldn't read orphan inode 11 (err -117) [ 268.403478][T14614] journal_path: Lookup failure for './file2' [ 268.420051][T14614] EXT4-fs: error: could not find journal device path [ 268.424159][T14617] loop2: detected capacity change from 0 to 512 [ 268.433373][T14602] EXT4-fs (loop1): 1 truncate cleaned up [ 268.437843][T14617] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 268.459141][T14617] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 268.467246][T14617] EXT4-fs (loop2): orphan cleanup on readonly fs [ 268.474080][T14617] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2771: Invalid block bitmap block 0 in block_group 0 [ 268.488358][T14617] EXT4-fs (loop2): Remounting filesystem read-only [ 268.494999][T14617] Quota error (device loop2): write_blk: dquota write failed [ 268.502624][T14617] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 268.513722][T14617] EXT4-fs (loop2): 1 orphan inode deleted [ 268.521730][T14617] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 268.548305][T14626] loop2: detected capacity change from 0 to 512 [ 268.561795][ T29] audit: type=1326 audit(1722510590.507:23340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14629 comm="syz.3.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 268.571718][T14632] loop3: detected capacity change from 0 to 128 [ 268.592874][T14626] /dev/loop2: Can't open blockdev [ 268.704521][T14642] bond0: entered promiscuous mode [ 268.709669][T14642] bond_slave_0: entered promiscuous mode [ 268.715541][T14642] bond_slave_1: entered promiscuous mode [ 268.721376][T14646] 9pnet: p9_errstr2errno: server reported unknown error ĄŠ [ 268.737212][T14648] bond0: entered promiscuous mode [ 268.742387][T14648] bond_slave_0: entered promiscuous mode [ 268.748288][T14648] bond_slave_1: entered promiscuous mode [ 268.860728][T14648] bond0: left promiscuous mode [ 268.865544][T14648] bond_slave_0: left promiscuous mode [ 268.871107][T14648] bond_slave_1: left promiscuous mode [ 268.976853][T14655] loop2: detected capacity change from 0 to 1024 [ 269.038746][T14657] loop0: detected capacity change from 0 to 1024 [ 269.062941][T14657] sctp: [Deprecated]: syz.0.2811 (pid 14657) Use of int in maxseg socket option. [ 269.062941][T14657] Use struct sctp_assoc_value instead [ 269.124936][T14675] loop2: detected capacity change from 0 to 512 [ 269.133863][T14675] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 269.144734][T14675] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 269.154741][T14675] EXT4-fs (loop2): group descriptors corrupted! [ 269.182281][T14677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.199597][ C0] eth0: bad gso: type: 1, size: 1408 [ 269.466943][T14694] loop4: detected capacity change from 0 to 128 [ 269.495904][T14641] bond0: left promiscuous mode [ 269.500924][T14641] bond_slave_0: left promiscuous mode [ 269.506593][T14641] bond_slave_1: left promiscuous mode [ 269.533709][T14696] __nla_validate_parse: 3 callbacks suppressed [ 269.533726][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 269.577983][T14694] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.604542][T14696] ip6gretap0: entered promiscuous mode [ 269.626708][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 269.635919][T14696] ip6gretap0: left promiscuous mode [ 269.656340][T14696] loop0: detected capacity change from 0 to 512 [ 269.732789][T14700] loop3: detected capacity change from 0 to 512 [ 269.740266][T14700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 269.745425][T14696] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 16: comm syz.0.2820: invalid block [ 269.753503][T14700] EXT4-fs (loop3): 1 truncate cleaned up [ 269.762874][T14696] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2820: couldn't read orphan inode 11 (err -117) [ 269.781419][T14696] EXT4-fs (loop0): 1 truncate cleaned up [ 269.789717][ T5854] bridge_slave_1: left allmulticast mode [ 269.795743][ T5854] bridge_slave_1: left promiscuous mode [ 269.801942][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.809760][ C0] eth0: bad gso: type: 1, size: 1408 [ 269.827132][ T5854] bridge_slave_0: left allmulticast mode [ 269.832827][ T5854] bridge_slave_0: left promiscuous mode [ 269.838546][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.150363][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.163195][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.174369][ T5854] bond0 (unregistering): Released all slaves [ 270.178527][T14725] loop0: detected capacity change from 0 to 164 [ 270.188417][T14710] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.195830][T14710] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.195873][T14725] Unable to read rock-ridge attributes [ 270.327550][ T5854] hsr_slave_0: left promiscuous mode [ 270.345122][ T5854] hsr_slave_1: left promiscuous mode [ 270.354359][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 270.354372][ T29] audit: type=1326 audit(1722510592.297:23352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 270.388340][T14746] netlink: 'syz.2.2830': attribute type 4 has an invalid length. [ 270.396310][T14746] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2830'. [ 270.412942][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.420491][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.422064][ T29] audit: type=1326 audit(1722510592.297:23353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 270.451454][ T29] audit: type=1326 audit(1722510592.307:23354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 270.475128][ T29] audit: type=1326 audit(1722510592.307:23355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 270.498758][ T29] audit: type=1326 audit(1722510592.307:23356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 270.522330][ T29] audit: type=1326 audit(1722510592.307:23357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 270.545913][ T29] audit: type=1326 audit(1722510592.327:23358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 270.569519][ T29] audit: type=1326 audit(1722510592.357:23359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 270.593413][ T29] audit: type=1326 audit(1722510592.357:23360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbaef2ae367 code=0x7ffc0000 [ 270.616896][ T29] audit: type=1326 audit(1722510592.357:23361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14742 comm="syz.3.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbaef252d09 code=0x7ffc0000 [ 270.628379][ T3651] vhci_hcd: vhci_device speed not set [ 270.647337][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.654807][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.687294][ T5854] veth1_macvtap: left promiscuous mode [ 270.692880][ T5854] veth0_macvtap: left promiscuous mode [ 270.698491][ T5854] veth1_vlan: left promiscuous mode [ 270.703714][ T5854] veth0_vlan: left promiscuous mode [ 270.714291][ C0] eth0: bad gso: type: 1, size: 1408 [ 270.867059][ T5854] team0 (unregistering): Port device team_slave_1 removed [ 270.880764][ T5854] team0 (unregistering): Port device team_slave_0 removed [ 270.949295][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'. [ 271.018441][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'. [ 271.048094][T14782] loop3: detected capacity change from 0 to 128 [ 271.061731][T14782] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 271.189194][T14786] bond0: entered promiscuous mode [ 271.194258][T14786] bond_slave_0: entered promiscuous mode [ 271.199983][T14786] bond_slave_1: entered promiscuous mode [ 271.425533][T14786] bond0: left promiscuous mode [ 271.430370][T14786] bond_slave_0: left promiscuous mode [ 271.435832][T14786] bond_slave_1: left promiscuous mode [ 271.486890][ T5854] IPVS: stop unused estimator thread 0... [ 271.603865][T14796] loop2: detected capacity change from 0 to 4096 [ 271.612730][T14796] EXT4-fs: Ignoring removed nobh option [ 271.623749][T14796] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.2844: Failed to acquire dquot type 1 [ 271.646343][ C0] eth0: bad gso: type: 1, size: 1408 [ 271.782292][T14828] bond0: entered promiscuous mode [ 271.787478][T14828] bond_slave_0: entered promiscuous mode [ 271.793214][T14828] bond_slave_1: entered promiscuous mode [ 271.834639][T14832] loop2: detected capacity change from 0 to 2048 [ 271.845717][T14834] loop1: detected capacity change from 0 to 512 [ 271.870978][T14834] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.082411][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'. [ 272.170765][T14847] loop3: detected capacity change from 0 to 2048 [ 272.184545][T14847] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.213668][T14841] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #20: comm syz.1.2855: corrupted inode contents [ 272.228303][T14841] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #20: comm syz.1.2855: mark_inode_dirty error [ 272.240318][T14841] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #20: comm syz.1.2855: corrupted inode contents [ 272.256220][T14841] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #20: comm syz.1.2855: mark_inode_dirty error [ 272.268462][T14841] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #20: comm syz.1.2855: mark inode dirty (error -117) [ 272.281231][T14841] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 272.614601][T14827] bond0: left promiscuous mode [ 272.619452][T14827] bond_slave_0: left promiscuous mode [ 272.624964][T14827] bond_slave_1: left promiscuous mode [ 272.691834][T14855] loop2: detected capacity change from 0 to 128 [ 272.717635][T14857] loop0: detected capacity change from 0 to 164 [ 272.720007][T14855] bridge0: port 3(gretap0) entered blocking state [ 272.730497][T14855] bridge0: port 3(gretap0) entered disabled state [ 272.738190][T14855] gretap0: entered allmulticast mode [ 272.744226][T14855] gretap0: entered promiscuous mode [ 272.749827][T14855] bridge0: port 3(gretap0) entered blocking state [ 272.756368][T14855] bridge0: port 3(gretap0) entered forwarding state [ 272.791127][T14862] loop0: detected capacity change from 0 to 1024 [ 272.848791][T14869] loop2: detected capacity change from 0 to 128 [ 272.859064][T14869] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.115406][ C0] eth0: bad gso: type: 1, size: 1408 [ 273.137790][T14882] loop3: detected capacity change from 0 to 128 [ 273.159678][T14882] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.195928][T14887] loop1: detected capacity change from 0 to 128 [ 273.402467][T14892] loop2: detected capacity change from 0 to 736 [ 273.456952][T14895] bond0: entered promiscuous mode [ 273.462169][T14895] bond_slave_0: entered promiscuous mode [ 273.468098][T14895] bond_slave_1: entered promiscuous mode [ 273.580672][T14895] bond0: left promiscuous mode [ 273.585511][T14895] bond_slave_0: left promiscuous mode [ 273.587575][T14908] loop2: detected capacity change from 0 to 256 [ 273.591086][T14895] bond_slave_1: left promiscuous mode [ 273.598888][T14908] vfat: Bad value for 'fmask' [ 273.620182][T14908] loop2: detected capacity change from 0 to 1764 [ 273.645171][T14908] iso9660: Bad value for 'gid' [ 273.650152][T14908] iso9660: Bad value for 'gid' [ 273.683606][ T3333] kernel write not supported for file bpf-prog (pid: 3333 comm: kworker/1:3) [ 273.695463][T14913] loop0: detected capacity change from 0 to 512 [ 273.707174][T14916] sctp: [Deprecated]: syz.4.2877 (pid 14916) Use of int in max_burst socket option deprecated. [ 273.707174][T14916] Use struct sctp_assoc_value instead [ 273.724712][T14908] vlan2: entered promiscuous mode [ 273.730091][T14908] macvtap0: entered promiscuous mode [ 273.735665][T14908] vlan2: entered allmulticast mode [ 273.740993][T14908] macvtap0: entered allmulticast mode [ 273.746496][T14908] veth0_macvtap: entered allmulticast mode [ 273.757806][T14908] team0: Device vlan2 is up. Set it down before adding it as a team port [ 273.768240][T14913] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.807921][T14908] macvtap0: left allmulticast mode [ 273.813141][T14908] veth0_macvtap: left allmulticast mode [ 273.818760][T14908] macvtap0: left promiscuous mode [ 273.974564][T14927] loop2: detected capacity change from 0 to 128 [ 273.982712][ C0] eth0: bad gso: type: 1, size: 1408 [ 274.039109][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2883'. [ 274.069160][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'. [ 274.183093][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 274.201813][T14950] netlink: 'syz.0.2887': attribute type 1 has an invalid length. [ 274.210647][T14950] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 274.423733][ C0] eth0: bad gso: type: 1, size: 1408 [ 274.454915][T15018] loop1: detected capacity change from 0 to 128 [ 274.463742][T14976] loop3: detected capacity change from 0 to 8192 [ 274.471258][T14978] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_cmd_wq": -EINTR [ 274.472540][T15018] ext4 filesystem being mounted at /325/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.473111][T14979] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_cmd_wq": -EINTR [ 274.616721][T14976] loop3: p1 p3 p4 [ 274.618421][T15031] loop0: detected capacity change from 0 to 128 [ 274.631142][T14976] loop3: p1 size 3523149824 extends beyond EOD, truncated [ 274.718617][ C0] eth0: bad gso: type: 1, size: 1408 [ 274.808969][T14976] loop3: p3 start 4294901760 is beyond EOD, truncated [ 274.815776][T14976] loop3: p4 size 50331648 extends beyond EOD, truncated [ 274.855674][T15038] netlink: 'syz.2.2900': attribute type 7 has an invalid length. [ 274.911849][T15037] loop2: detected capacity change from 0 to 164 [ 275.035904][T15053] loop0: detected capacity change from 0 to 512 [ 275.055075][ T6454] bridge_slave_1: left allmulticast mode [ 275.060821][ T6454] bridge_slave_1: left promiscuous mode [ 275.066535][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.075348][T15053] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.088773][T15053] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2901: corrupted xattr block 32: invalid header [ 275.102169][T15053] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 275.111529][T15053] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2901: corrupted xattr block 32: invalid header [ 275.112931][ T6454] bridge_slave_0: left allmulticast mode [ 275.124959][T15053] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2901: corrupted xattr block 32: invalid header [ 275.130550][ T6454] bridge_slave_0: left promiscuous mode [ 275.149480][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.162901][T15053] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 275.231521][T15053] EXT4-fs error (device loop0): ext4_get_inode_usage:901: inode #15: comm syz.0.2901: corrupted xattr block 32: invalid header [ 275.429922][ T6454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.443609][ T6454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.455590][ T6454] bond0 (unregistering): Released all slaves [ 275.486212][T15059] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.520501][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'. [ 275.532327][T15066] loop1: detected capacity change from 0 to 512 [ 275.540653][T15066] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 16: comm syz.1.2906: invalid block [ 275.553066][T15066] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2906: couldn't read orphan inode 11 (err -117) [ 275.565342][T15066] EXT4-fs (loop1): 1 truncate cleaned up [ 275.573987][ T6454] hsr_slave_0: left promiscuous mode [ 275.583107][ T6454] hsr_slave_1: left promiscuous mode [ 275.591652][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.599251][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.607872][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.615446][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.625216][ T6454] veth1_macvtap: left promiscuous mode [ 275.630847][ T6454] veth0_macvtap: left promiscuous mode [ 275.636603][ T6454] veth1_vlan: left promiscuous mode [ 275.641833][ T6454] veth0_vlan: left promiscuous mode [ 275.657692][ T29] kauditd_printk_skb: 1295 callbacks suppressed [ 275.657705][ T29] audit: type=1326 audit(1722510597.607:24655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc24e73b9 code=0x7ffc0000 [ 275.691251][T15071] ebtables: ebtables: counters copy to user failed while replacing table [ 275.701845][T15071] syz.1.2907 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 275.715264][ T29] audit: type=1326 audit(1722510597.607:24656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefc24e73b9 code=0x7ffc0000 [ 275.738984][ T29] audit: type=1326 audit(1722510597.607:24657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc24e73b9 code=0x7ffc0000 [ 275.762702][ T29] audit: type=1326 audit(1722510597.607:24658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc24e73b9 code=0x7ffc0000 [ 275.786447][ T29] audit: type=1326 audit(1722510597.607:24659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefc24e73b9 code=0x7ffc0000 [ 275.810061][ T29] audit: type=1326 audit(1722510597.637:24660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc24e73b9 code=0x7ffc0000 [ 275.833648][ T29] audit: type=1326 audit(1722510597.637:24661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fefc24de367 code=0x7ffc0000 [ 275.857129][ T29] audit: type=1326 audit(1722510597.637:24662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fefc2482d09 code=0x7ffc0000 [ 275.880666][ T29] audit: type=1326 audit(1722510597.637:24663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fefc24de367 code=0x7ffc0000 [ 275.904218][ T29] audit: type=1326 audit(1722510597.637:24664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15074 comm="syz.4.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fefc2482d09 code=0x7ffc0000 [ 275.977237][T15081] loop4: detected capacity change from 0 to 128 [ 276.054743][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 276.066308][ T6454] team0 (unregistering): Port device team_slave_1 removed [ 276.099981][ T6454] team0 (unregistering): Port device team_slave_0 removed [ 276.151692][T15088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2914'. [ 276.204035][T15102] loop2: detected capacity change from 0 to 128 [ 276.217712][T15102] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 276.324884][T15092] chnl_net:caif_netlink_parms(): no params data found [ 276.350931][T15111] loop3: detected capacity change from 0 to 512 [ 276.358783][T15111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 276.369419][T15111] System zones: 1-12 [ 276.374123][T15111] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2917: invalid indirect mapped block 8 (level 2) [ 276.388746][T15092] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.395850][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.406244][T15111] EXT4-fs (loop3): Remounting filesystem read-only [ 276.412946][T15111] EXT4-fs (loop3): 1 truncate cleaned up [ 276.422828][T15092] bridge_slave_0: entered allmulticast mode [ 276.430485][T15111] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 276.443993][T15092] bridge_slave_0: entered promiscuous mode [ 276.452092][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2918'. [ 276.464131][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.471253][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.481356][T15092] bridge_slave_1: entered allmulticast mode [ 276.488193][T15092] bridge_slave_1: entered promiscuous mode [ 276.513221][T15092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.529572][T15122] loop1: detected capacity change from 0 to 512 [ 276.539263][T15092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.552185][T15122] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 16: comm syz.1.2918: invalid block [ 276.568564][T15122] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2918: couldn't read orphan inode 11 (err -117) [ 276.595974][T15122] EXT4-fs (loop1): 1 truncate cleaned up [ 276.603969][T15092] team0: Port device team_slave_0 added [ 276.622414][T15092] team0: Port device team_slave_1 added [ 276.645363][ T6454] IPVS: stop unused estimator thread 0... [ 276.671287][T15092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.678289][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.704307][T15092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.716077][T15092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.723152][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.749213][T15092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.792056][T15092] hsr_slave_0: entered promiscuous mode [ 276.798211][T15092] hsr_slave_1: entered promiscuous mode [ 276.804109][T15092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.811889][T15092] Cannot create hsr debugfs directory [ 276.840912][ T6454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.870602][ C0] eth0: bad gso: type: 1, size: 1408 [ 276.922210][ T6454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.976218][ T6454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.997975][T15151] loop1: detected capacity change from 0 to 1024 [ 277.004728][T15151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.022210][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 277.058754][T15153] loop3: detected capacity change from 0 to 512 [ 277.083894][ T6454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.108097][T15153] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.136219][T15165] loop0: detected capacity change from 0 to 2048 [ 277.182612][T15165] Alternate GPT is invalid, using primary GPT. [ 277.182709][ T6454] bridge_slave_1: left allmulticast mode [ 277.188957][T15165] loop0: p2 p3 p7 [ 277.194413][ T6454] bridge_slave_1: left promiscuous mode [ 277.204076][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.225563][T15169] loop1: detected capacity change from 0 to 512 [ 277.232857][T15169] EXT4-fs: Mount option(s) incompatible with ext2 [ 277.240074][ T6454] bond_slave_0: left promiscuous mode [ 277.245488][ T6454] bond_slave_1: left promiscuous mode [ 277.295421][T15176] loop3: detected capacity change from 0 to 512 [ 277.308114][T15176] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2931: bg 0: block 5: invalid block bitmap [ 277.321064][T15176] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 277.343417][T15176] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2931: invalid indirect mapped block 3 (level 2) [ 277.364304][T15176] EXT4-fs (loop3): 1 orphan inode deleted [ 277.370085][T15176] EXT4-fs (loop3): 1 truncate cleaned up [ 277.429077][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2931'. [ 277.438392][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2931'. [ 277.480934][T15190] loop3: detected capacity change from 0 to 512 [ 277.512551][ T6454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.523402][ T6454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.533968][ T6454] bond0 (unregistering): Released all slaves [ 277.541994][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'. [ 277.588422][T15195] loop1: detected capacity change from 0 to 512 [ 277.597613][T15199] loop0: detected capacity change from 0 to 128 [ 277.605496][T15191] can: request_module (can-proto-0) failed. [ 277.608733][T15199] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 277.645464][T15195] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2935: casefold flag without casefold feature [ 277.659543][T15195] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2935: couldn't read orphan inode 15 (err -117) [ 277.680451][T15195] ext4: Unknown parameter 'xśěÝMkTW' [ 277.744294][T15214] loop1: detected capacity change from 0 to 128 [ 277.754298][T15214] ext4 filesystem being mounted at /336/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 278.173264][T15092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.184564][ T6454] IPVS: stopping backup sync thread 13975 ... [ 278.230983][ T6454] hsr_slave_0: left promiscuous mode [ 278.236890][ T6454] hsr_slave_1: left promiscuous mode [ 278.243125][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.250673][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.250728][T15217] loop3: detected capacity change from 0 to 512 [ 278.265006][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.272498][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.282141][ T6454] veth1_macvtap: left promiscuous mode [ 278.287726][ T6454] veth0_macvtap: left promiscuous mode [ 278.287893][T15217] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.293207][ T6454] veth1_vlan: left promiscuous mode [ 278.308639][ T6454] veth0_vlan: left promiscuous mode [ 278.402884][T15231] loop3: detected capacity change from 0 to 512 [ 278.417636][T15231] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.429230][ T6454] team0 (unregistering): Port device team_slave_1 removed [ 278.444096][T15231] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2940: Directory hole found for htree leaf block 0 [ 278.463742][ T6454] team0 (unregistering): Port device team_slave_0 removed [ 278.515606][T15092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.525427][T15092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.533948][T15092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.542899][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'. [ 278.557050][T15241] IPv6: addrconf: prefix option has invalid lifetime [ 278.567046][T15241] loop3: detected capacity change from 0 to 512 [ 278.573909][T15241] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 278.585551][T15241] EXT4-fs (loop3): invalid journal inode [ 278.591329][T15241] EXT4-fs (loop3): can't get journal size [ 278.632161][T15241] EXT4-fs (loop3): 1 truncate cleaned up [ 278.666349][T15163] chnl_net:caif_netlink_parms(): no params data found [ 278.700355][T15249] loop1: detected capacity change from 0 to 512 [ 278.711594][T15249] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.724059][T15249] EXT4-fs (loop1): can't mount with commit=4, fs mounted w/o journal [ 278.742855][T15163] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.749982][T15163] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.757390][T15163] bridge_slave_0: entered allmulticast mode [ 278.765407][T15163] bridge_slave_0: entered promiscuous mode [ 278.772522][T15163] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.779776][T15163] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.787066][T15163] bridge_slave_1: entered allmulticast mode [ 278.793591][T15163] bridge_slave_1: entered promiscuous mode [ 278.842087][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 278.863138][T15163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.874668][T15259] vxlan1: entered allmulticast mode [ 278.887154][T15163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.911006][T15163] team0: Port device team_slave_0 added [ 278.917830][T15163] team0: Port device team_slave_1 added [ 278.970821][T15163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.977835][T15163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.003939][T15163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.023198][T15271] loop0: detected capacity change from 0 to 128 [ 279.032134][T15092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.040404][T15163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.042729][T15271] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.047421][T15163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.105008][T15163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.139673][T15163] hsr_slave_0: entered promiscuous mode [ 279.145745][T15163] hsr_slave_1: entered promiscuous mode [ 279.153383][T15163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.161160][T15163] Cannot create hsr debugfs directory [ 279.194457][T15092] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.198699][T15276] loop1: detected capacity change from 0 to 2048 [ 279.228807][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.235993][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.245224][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.252331][ T3668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.565863][ T6454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.579005][T15287] loop3: detected capacity change from 0 to 512 [ 279.586900][T15287] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 16: comm syz.3.2952: invalid block [ 279.598527][T15287] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2952: couldn't read orphan inode 11 (err -117) [ 279.601119][T15282] vlan4: entered allmulticast mode [ 279.610772][T15287] EXT4-fs (loop3): 1 truncate cleaned up [ 279.615517][T15282] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 279.628646][T15282] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 279.673567][ T6454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.697066][T15295] loop3: detected capacity change from 0 to 128 [ 279.709213][T15295] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.756178][T15092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.791991][ T6454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.850217][ T6454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.667631][ T29] kauditd_printk_skb: 975 callbacks suppressed [ 280.667681][ T29] audit: type=1326 audit(1722510602.607:25640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febc2f62d09 code=0x7ffc0000 [ 280.698664][ T29] audit: type=1326 audit(1722510602.617:25641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7febc2fc73b9 code=0x7ffc0000 [ 280.722262][ T29] audit: type=1326 audit(1722510602.617:25642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febc2fbe367 code=0x7ffc0000 [ 280.745865][ T29] audit: type=1326 audit(1722510602.617:25643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febc2f62d09 code=0x7ffc0000 [ 280.769444][ T29] audit: type=1326 audit(1722510602.617:25644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febc2fbe367 code=0x7ffc0000 [ 280.793022][ T29] audit: type=1326 audit(1722510602.617:25645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febc2f62d09 code=0x7ffc0000 [ 280.816768][ T29] audit: type=1326 audit(1722510602.617:25646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febc2fbe367 code=0x7ffc0000 [ 280.840434][ T29] audit: type=1326 audit(1722510602.617:25647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febc2f62d09 code=0x7ffc0000 [ 280.863987][ T29] audit: type=1326 audit(1722510602.617:25648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febc2fbe367 code=0x7ffc0000 [ 280.887736][ T29] audit: type=1326 audit(1722510602.617:25649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15319 comm="syz.1.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febc2f62d09 code=0x7ffc0000 [ 280.971424][T15331] __nla_validate_parse: 3 callbacks suppressed [ 280.971434][T15331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 280.989796][T15331] bond_slave_0: entered promiscuous mode [ 280.995460][T15331] bond_slave_1: entered promiscuous mode [ 280.995596][T15332] loop1: detected capacity change from 0 to 512 [ 281.002268][T15331] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 281.013640][T15332] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 16: comm syz.1.2960: invalid block [ 281.025738][T15332] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2960: couldn't read orphan inode 11 (err -117) [ 281.037842][T15332] EXT4-fs (loop1): 1 truncate cleaned up [ 281.046967][T15092] veth0_vlan: entered promiscuous mode [ 281.055930][T15092] veth1_vlan: entered promiscuous mode [ 281.068231][ T6454] gretap0: left allmulticast mode [ 281.073292][ T6454] gretap0: left promiscuous mode [ 281.078408][ T6454] bridge0: port 3(gretap0) entered disabled state [ 281.085633][ T6454] bridge_slave_1: left allmulticast mode [ 281.091331][ T6454] bridge_slave_1: left promiscuous mode [ 281.097100][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.105768][ T6454] bridge_slave_0: left allmulticast mode [ 281.112331][ T6454] bridge_slave_0: left promiscuous mode [ 281.118910][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.180554][T15341] loop0: detected capacity change from 0 to 512 [ 281.188356][T15341] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 16: comm syz.0.2961: invalid block [ 281.199945][T15341] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2961: couldn't read orphan inode 11 (err -117) [ 281.212064][T15341] EXT4-fs (loop0): 1 truncate cleaned up [ 281.249349][ T6454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.259856][ T6454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.270643][ T6454] bond0 (unregistering): Released all slaves [ 281.278336][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 281.292644][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 281.303981][T15340] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2962'. [ 281.313347][T15340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2962'. [ 281.348635][T15092] veth0_macvtap: entered promiscuous mode [ 281.358457][T15092] veth1_macvtap: entered promiscuous mode [ 281.372446][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.382991][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.389249][T15349] loop1: detected capacity change from 0 to 512 [ 281.393134][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.409710][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.419649][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.421931][T15349] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 281.430086][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.438251][T15349] EXT4-fs (loop1): orphan cleanup on readonly fs [ 281.447916][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.454779][T15349] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.2964: iget: bad extended attribute block 955935 [ 281.464574][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.480751][T15349] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2964: couldn't read orphan inode 16 (err -117) [ 281.487322][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.509746][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.519571][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.530166][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.540376][ T8893] EXT4-fs unmount: 94 callbacks suppressed [ 281.540391][ T8893] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.542541][T15092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.565822][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.576306][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.583368][T15353] loop1: detected capacity change from 0 to 128 [ 281.586125][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.586142][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.586170][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.596634][T15353] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.602970][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.602999][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.614485][T15353] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 281.623187][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.623207][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.623219][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.623261][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.728071][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.742022][T15092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.750748][T15092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.759589][T15092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.768586][T15092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.777344][T15092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.816769][T15357] loop0: detected capacity change from 0 to 128 [ 282.729799][ T6454] hsr_slave_0: left promiscuous mode [ 282.736059][ T6454] hsr_slave_1: left promiscuous mode [ 282.746233][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.753682][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.776593][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.784030][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.805192][ T8893] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 282.814724][ T6454] veth1_macvtap: left promiscuous mode [ 282.820263][ T6454] veth0_macvtap: left promiscuous mode [ 282.826058][ T6454] veth1_vlan: left promiscuous mode [ 282.831366][ T6454] veth0_vlan: left promiscuous mode [ 282.879346][T15373] loop1: detected capacity change from 0 to 512 [ 282.919236][T15373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.932011][T15373] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.951944][T15373] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 282.968460][T15373] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 282.980841][T15373] EXT4-fs (loop1): This should not happen!! Data will be lost [ 282.980841][T15373] [ 282.990501][T15373] EXT4-fs (loop1): Total free blocks count 0 [ 282.996491][T15373] EXT4-fs (loop1): Free/Dirty block details [ 283.002397][T15373] EXT4-fs (loop1): free_blocks=65280 [ 283.007841][T15373] EXT4-fs (loop1): dirty_blocks=23 [ 283.012948][T15373] EXT4-fs (loop1): Block reservation details [ 283.018948][T15373] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 283.051676][ T6454] team0 (unregistering): Port device team_slave_1 removed [ 283.062754][T15380] loop0: detected capacity change from 0 to 512 [ 283.074049][ T6454] team0 (unregistering): Port device team_slave_0 removed [ 283.084414][T15380] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 16: comm syz.0.2971: invalid block [ 283.107169][T15380] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2971: couldn't read orphan inode 11 (err -117) [ 283.121066][T15379] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 283.143860][T15380] EXT4-fs (loop0): 1 truncate cleaned up [ 283.167395][T15380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.180068][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2971'. [ 283.228971][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2971'. [ 283.294599][T12961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.314177][T15163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.339489][T15163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.366015][T15163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.384847][T15395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2974'. [ 283.393981][T15163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.474532][T15163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.509315][T15163] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.531638][T15405] loop0: detected capacity change from 0 to 128 [ 283.540857][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.547943][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.587611][T15163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.598020][T15163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.611850][T15410] loop3: detected capacity change from 0 to 128 [ 283.629800][T15410] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.633785][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.649083][ T3668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.660496][T15405] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.677705][T15405] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.717995][T15410] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.869138][ T6454] hsr0: left allmulticast mode [ 283.873947][ T6454] hsr_slave_0: left allmulticast mode [ 283.879405][ T6454] hsr_slave_1: left allmulticast mode [ 283.884866][ T6454] hsr0: left promiscuous mode [ 283.889853][ T6454] bridge0: port 3(hsr0) entered disabled state [ 284.156588][ T6454] bridge_slave_1: left allmulticast mode [ 284.162274][ T6454] bridge_slave_1: left promiscuous mode [ 284.167984][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.177443][ T6454] bridge_slave_0: left allmulticast mode [ 284.183128][ T6454] bridge_slave_0: left promiscuous mode [ 284.188988][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.330122][ T6454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.341065][ T6454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.352022][ T6454] bond0 (unregistering): Released all slaves [ 284.394932][T12961] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.411109][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 284.435561][T15441] loop0: detected capacity change from 0 to 764 [ 284.443037][T15441] /dev/loop0: Can't open blockdev [ 284.463627][T15442] loop1: detected capacity change from 0 to 512 [ 284.470355][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 284.479739][T13427] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.510324][T15442] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 16: comm syz.1.2984: invalid block [ 284.528311][ T6454] tipc: Disabling bearer [ 284.533752][ T6454] tipc: Left network mode [ 284.538515][T15442] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2984: couldn't read orphan inode 11 (err -117) [ 284.543301][T15163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.561934][T15442] EXT4-fs (loop1): 1 truncate cleaned up [ 284.581800][T15442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.594213][ C0] eth0: bad gso: type: 1, size: 1408 [ 284.637044][ T8893] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.669030][ T6454] hsr_slave_0: left promiscuous mode [ 284.677507][ T6454] hsr_slave_1: left promiscuous mode [ 284.691918][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.699518][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.722769][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.730296][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.758383][ T6454] veth1_macvtap: left promiscuous mode [ 284.763886][ T6454] veth0_macvtap: left promiscuous mode [ 284.769596][ T6454] veth1_vlan: left promiscuous mode [ 284.774839][ T6454] veth0_vlan: left promiscuous mode [ 284.798146][T15476] loop1: detected capacity change from 0 to 128 [ 284.805164][T15477] loop3: detected capacity change from 0 to 1024 [ 284.816886][T15476] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.819840][T15477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 284.852494][T15476] ext4 filesystem being mounted at /353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 284.886057][T15477] EXT4-fs (loop3): stripe (10) is not aligned with cluster size (16), stripe is disabled [ 284.896029][T15477] EXT4-fs (loop3): can't mount with commit=10, fs mounted w/o journal [ 285.022802][ T6454] team0 (unregistering): Port device team_slave_1 removed [ 285.035823][ T6454] team0 (unregistering): Port device team_slave_0 removed [ 285.206076][T15484] netlink: 'syz.3.2995': attribute type 29 has an invalid length. [ 285.225616][T15163] veth0_vlan: entered promiscuous mode [ 285.246008][T15163] veth1_vlan: entered promiscuous mode [ 285.307867][T15163] veth0_macvtap: entered promiscuous mode [ 285.339521][T15163] veth1_macvtap: entered promiscuous mode [ 285.355273][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.365798][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.375669][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.384229][T15489] loop0: detected capacity change from 0 to 128 [ 285.386256][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.402384][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.412829][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.422648][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.433103][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.443012][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.453446][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.465798][T15489] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.472583][T15163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.489831][T15489] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 285.528876][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.539429][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.549298][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.559962][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.569861][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.580314][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.590228][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.600662][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.610526][T15163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.620974][T15163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.707070][ T29] kauditd_printk_skb: 1206 callbacks suppressed [ 285.707087][ T29] audit: type=1400 audit(1722510607.557:26856): avc: denied { write } for pid=15497 comm="syz.3.2998" name="file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 285.737226][T15163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.738177][ T8893] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.746011][T15163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.762066][T15163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.771033][T15163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.779740][T15163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.881946][T15509] loop3: detected capacity change from 0 to 512 [ 285.895187][T15509] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 16: comm syz.3.3000: invalid block [ 285.908566][T15509] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3000: couldn't read orphan inode 11 (err -117) [ 285.921073][T15509] EXT4-fs (loop3): 1 truncate cleaned up [ 285.932136][T15509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.966196][ T29] audit: type=1400 audit(1722510607.907:26857): avc: denied { create } for pid=15510 comm="syz.4.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 286.073032][T15505] __nla_validate_parse: 1 callbacks suppressed [ 286.073074][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'. [ 286.094007][ T29] audit: type=1326 audit(1722510608.027:26858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4df773b9 code=0x7ffc0000 [ 286.117733][ T29] audit: type=1326 audit(1722510608.027:26859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4df773b9 code=0x7ffc0000 [ 286.141376][ T29] audit: type=1326 audit(1722510608.027:26860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4df773b9 code=0x7ffc0000 [ 286.165058][ T29] audit: type=1326 audit(1722510608.037:26861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4df773b9 code=0x7ffc0000 [ 286.188865][ T29] audit: type=1326 audit(1722510608.037:26862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4df773b9 code=0x7ffc0000 [ 286.212607][ T29] audit: type=1326 audit(1722510608.037:26863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4df773b9 code=0x7ffc0000 [ 286.236409][ T29] audit: type=1326 audit(1722510608.037:26864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4df773b9 code=0x7ffc0000 [ 286.260052][ T29] audit: type=1326 audit(1722510608.037:26865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15515 comm="syz.4.3003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb4df6e367 code=0x7ffc0000 [ 286.297262][T13427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.328892][T12961] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.346911][T15527] loop4: detected capacity change from 0 to 256 [ 286.365463][T15534] loop1: detected capacity change from 0 to 128 [ 286.373364][T15532] bond0: entered promiscuous mode [ 286.374830][T15534] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.378477][T15532] bond_slave_0: entered promiscuous mode [ 286.378593][T15532] bond_slave_1: entered promiscuous mode [ 286.406431][T15534] ext4 filesystem being mounted at /356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.504504][T15541] loop2: detected capacity change from 0 to 512 [ 286.511327][T15532] bond0: left promiscuous mode [ 286.516145][T15532] bond_slave_0: left promiscuous mode [ 286.521576][T15532] bond_slave_1: left promiscuous mode [ 286.532698][T15541] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 286.540825][T15541] EXT4-fs (loop2): orphan cleanup on readonly fs [ 286.548490][T15541] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.3009: Failed to acquire dquot type 1 [ 286.561542][T15541] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3009: bg 0: block 40: padding at end of block bitmap is not set [ 286.576252][T15541] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 286.636378][T15541] EXT4-fs (loop2): 1 truncate cleaned up [ 286.647585][T15541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.690403][T15541] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.3009: corrupted xattr block 31: invalid header [ 286.705670][T15541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 286.714873][T15541] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.3009: corrupted xattr block 31: invalid header [ 286.730080][T15541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 286.739364][T15541] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.3009: bad symlink. [ 286.752032][T15549] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.3009: corrupted xattr block 31: invalid header [ 286.768346][T15549] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 286.777889][T15549] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.3009: bad symlink. [ 286.827877][T15163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.873076][T15551] loop2: detected capacity change from 0 to 2048 [ 286.887919][T15551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.250936][ T8893] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.274677][T15567] loop0: detected capacity change from 0 to 128 [ 287.284693][T15567] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.299507][T15567] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.301085][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 287.349720][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 287.374016][T15571] loop3: detected capacity change from 0 to 512 [ 287.404309][T15571] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 16: comm syz.3.3016: invalid block [ 287.417791][T15571] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3016: couldn't read orphan inode 11 (err -117) [ 287.443184][T15571] EXT4-fs (loop3): 1 truncate cleaned up [ 287.460030][T15571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.492479][T15578] loop4: detected capacity change from 0 to 256 [ 287.499503][T15578] msdos: Bad value for 'check' [ 287.524955][T13427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.550954][T15578] loop4: detected capacity change from 0 to 2048 [ 287.577382][T15582] loop3: detected capacity change from 0 to 512 [ 287.593281][T15578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.612665][T15578] EXT4-fs (loop4): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 287.639814][T15578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.712374][ C0] eth0: bad gso: type: 1, size: 1408 [ 287.722088][T15163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.777379][T15592] bond0: entered promiscuous mode [ 287.790121][T15593] pim6reg1: entered allmulticast mode [ 287.797380][T15092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.858950][T15601] loop2: detected capacity change from 0 to 128 [ 287.867303][T15601] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.879610][T15601] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.913039][T15592] bond0: left promiscuous mode [ 287.987469][T15617] loop4: detected capacity change from 0 to 512 [ 287.997986][T15617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.011679][T15617] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.040666][T15616] x_tables: ip_tables: osf match: only valid for protocol 6 [ 288.073234][T15092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.150359][T12961] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.206839][T15623] loop0: detected capacity change from 0 to 1024 [ 288.229971][T15623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.397834][T12961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.502244][T15640] netlink: 'syz.0.3034': attribute type 2 has an invalid length. [ 288.510155][T15640] netlink: 'syz.0.3034': attribute type 1 has an invalid length. [ 288.517910][T15640] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3034'. [ 288.568962][T15642] pim6reg1: entered allmulticast mode [ 288.578493][T15640] loop0: detected capacity change from 0 to 8192 [ 288.585165][T15640] vfat: Unknown parameter '' [ 288.614012][ C0] eth0: bad gso: type: 1, size: 1408 [ 288.736780][T15163] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.737143][T15652] tap0: tun_chr_ioctl cmd 1074025675 [ 288.751272][T15652] tap0: persist enabled [ 288.755434][T15653] tap0: tun_chr_ioctl cmd 1074025675 [ 288.760750][T15653] tap0: persist enabled [ 288.851118][T15668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3042'. [ 288.874578][T15671] loop1: detected capacity change from 0 to 1024 [ 288.886626][T15668] dvmrp5: entered allmulticast mode [ 288.894248][T15668] dvmrp5: left allmulticast mode [ 288.914172][T15671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.002914][T15681] loop0: detected capacity change from 0 to 128 [ 289.040499][ T8893] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.163681][T15692] loop0: detected capacity change from 0 to 512 [ 289.170307][T15692] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.178193][T15692] ext4: Unknown parameter 'subj_role' [ 289.293442][T15695] loop4: detected capacity change from 0 to 128 [ 289.514009][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3051'. [ 289.527109][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3051'. [ 289.542312][T15703] loop3: detected capacity change from 0 to 512 [ 289.550654][T15703] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 16: comm syz.3.3051: invalid block [ 289.561974][T15703] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3051: couldn't read orphan inode 11 (err -117) [ 289.574735][T15703] EXT4-fs (loop3): 1 truncate cleaned up [ 289.580807][T15703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.601479][T13427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.814228][T15722] loop2: detected capacity change from 0 to 512 [ 289.821327][T15722] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 289.832231][T15722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 289.840597][T15722] EXT4-fs (loop2): orphan cleanup on readonly fs [ 289.848804][T15722] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3054: bg 0: block 361: padding at end of block bitmap is not set [ 289.863836][T15722] EXT4-fs (loop2): Remounting filesystem read-only [ 289.870733][T15722] EXT4-fs (loop2): 1 truncate cleaned up [ 289.876759][T15722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 289.889728][T15722] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 289.896656][T15722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 289.935837][T15733] loop2: detected capacity change from 0 to 1024 [ 289.949122][T15733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.970057][T15737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=15737 comm=syz.0.3058 [ 289.982836][T15737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=15737 comm=syz.0.3058 [ 289.995678][T15737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15737 comm=syz.0.3058 [ 290.010867][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 290.022093][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 290.060460][T15746] loop0: detected capacity change from 0 to 128 [ 290.069177][T15746] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.082379][T15746] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.082601][T15163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.141541][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3062'. [ 290.186526][T15749] loop2: detected capacity change from 0 to 512 [ 290.210354][T15749] EXT4-fs error (device loop2): __ext4_iget:4985: inode #11: block 16: comm syz.2.3062: invalid block [ 290.224022][T15749] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3062: couldn't read orphan inode 11 (err -117) [ 290.247673][T15749] EXT4-fs (loop2): 1 truncate cleaned up [ 290.264386][T15749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.300597][ T5854] bridge_slave_1: left allmulticast mode [ 290.306333][ T5854] bridge_slave_1: left promiscuous mode [ 290.311989][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.415242][T15163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.463455][ T5854] bridge_slave_0: left allmulticast mode [ 290.469259][ T5854] bridge_slave_0: left promiscuous mode [ 290.474919][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.692776][T15766] loop3: detected capacity change from 0 to 1024 [ 290.713169][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.723674][T15766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.737825][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 290.737860][ T29] audit: type=1326 audit(1722510612.687:27260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaef2b5d50 code=0x7ffc0000 [ 290.776162][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.791297][ T5854] bond0 (unregistering): Released all slaves [ 290.798187][ T29] audit: type=1326 audit(1722510612.717:27261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fbaef2b6137 code=0x7ffc0000 [ 290.821768][ T29] audit: type=1326 audit(1722510612.717:27262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaef2b5d50 code=0x7ffc0000 [ 290.845347][ T29] audit: type=1326 audit(1722510612.717:27263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 290.868924][ T29] audit: type=1326 audit(1722510612.717:27264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 290.893025][ T29] audit: type=1326 audit(1722510612.717:27265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 290.916953][ T29] audit: type=1326 audit(1722510612.717:27266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 290.940558][ T29] audit: type=1326 audit(1722510612.717:27267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 290.964274][ T29] audit: type=1326 audit(1722510612.717:27268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbaef2b73f3 code=0x7ffc0000 [ 290.987660][ T29] audit: type=1326 audit(1722510612.727:27269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbaef2b5e9f code=0x7ffc0000 [ 291.052564][T12961] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.072988][T13427] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.090710][T15773] pim6reg1: entered allmulticast mode [ 291.118910][ T5854] hsr_slave_0: left promiscuous mode [ 291.124806][ T5854] hsr_slave_1: left promiscuous mode [ 291.133681][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.141292][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.162306][T15778] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 291.177743][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.185210][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.260493][T15786] loop2: detected capacity change from 0 to 512 [ 291.267198][T15786] EXT4-fs: Ignoring removed oldalloc option [ 291.277602][T15786] EXT4-fs: Ignoring removed i_version option [ 291.294023][T15786] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.369925][T15791] 9pnet_fd: Insufficient options for proto=fd [ 291.406612][ T5854] veth1_macvtap: left promiscuous mode [ 291.412131][ T5854] veth0_macvtap: left promiscuous mode [ 291.417705][ T5854] veth1_vlan: left promiscuous mode [ 291.423109][ T5854] veth0_vlan: left promiscuous mode [ 291.429448][T15786] EXT4-fs (loop2): orphan cleanup on readonly fs [ 291.446348][T15786] EXT4-fs (loop2): 1 truncate cleaned up [ 291.451884][T15796] loop3: detected capacity change from 0 to 512 [ 291.453349][T15786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.560484][T15163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.582342][T15813] loop2: detected capacity change from 0 to 128 [ 291.589989][T15815] loop1: detected capacity change from 0 to 512 [ 291.596915][T15813] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.611258][T15813] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 291.644301][T15815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.644896][ T5854] team0 (unregistering): Port device team_slave_1 removed [ 291.658283][T15815] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.683230][ T5854] team0 (unregistering): Port device team_slave_0 removed [ 291.730071][T15778] __nla_validate_parse: 2 callbacks suppressed [ 291.730088][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3069'. [ 291.748470][T15820] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.3078: Directory hole found for htree leaf block 0 [ 291.772560][T15820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3078'. [ 292.394316][T15838] loop3: detected capacity change from 0 to 256 [ 292.458224][T15163] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.484324][ T8893] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.516148][T15846] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 292.532230][T15848] 9pnet_fd: Insufficient options for proto=fd [ 292.532268][T15849] 9pnet_fd: Insufficient options for proto=fd [ 292.760145][T15855] loop0: detected capacity change from 0 to 1024 [ 292.766436][T15856] hub 6-0:1.0: USB hub found [ 292.778172][T15856] hub 6-0:1.0: 8 ports detected [ 292.791360][T15855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.432731][ C0] eth0: bad gso: type: 1, size: 1408 [ 293.483982][T15878] loop1: detected capacity change from 0 to 512 [ 293.492148][T15878] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3094: bg 0: block 5: invalid block bitmap [ 293.504744][T15878] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 293.513749][T15878] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3094: invalid indirect mapped block 3 (level 2) [ 293.514344][T12961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.530444][T15878] EXT4-fs (loop1): 1 orphan inode deleted [ 293.542153][T15878] EXT4-fs (loop1): 1 truncate cleaned up [ 293.548409][T15878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.561562][T15882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3096'. [ 293.829697][T15885] loop4: detected capacity change from 0 to 4096 [ 293.838378][T15885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.224241][T15893] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 294.274289][ T8893] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.429048][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'. [ 294.731251][T15092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.752280][T15916] loop0: detected capacity change from 0 to 128 [ 294.822144][T15923] loop1: detected capacity change from 0 to 1024 [ 294.850059][T15923] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 294.977873][T15940] No such timeout policy "syz0" [ 295.042474][T15945] netlink: 'syz.0.3114': attribute type 5 has an invalid length. [ 295.106890][T15950] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 295.127963][T15951] loop1: detected capacity change from 0 to 128 [ 295.131314][T15950] vhci_hcd: invalid port number 219 [ 295.139471][T15950] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 295.210606][T15962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3120'. [ 295.250594][T15967] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 295.263051][T15968] loop1: detected capacity change from 0 to 512 [ 295.270819][T15962] syzkaller0: entered promiscuous mode [ 295.276348][T15962] syzkaller0: entered allmulticast mode [ 295.282385][T15968] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.289516][T15968] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 295.305222][T15968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 295.318908][T15968] System zones: 1-12 [ 295.326842][T15968] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3118: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 295.330933][T15962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3120'. [ 295.354636][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'. [ 295.367098][T15968] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3118: couldn't read orphan inode 15 (err -117) [ 295.391671][T15968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.440216][T15976] loop0: detected capacity change from 0 to 512 [ 295.530109][T15982] loop0: detected capacity change from 0 to 736 [ 295.536848][T15982] iso9660: Bad value for 'mode' [ 295.554168][T15987] loop3: detected capacity change from 0 to 128 [ 295.630398][T15995] loop3: detected capacity change from 0 to 256 [ 295.754014][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 295.754029][ T29] audit: type=1326 audit(1722510617.697:27341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.4.3135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb4df773b9 code=0x0 [ 295.849724][T16008] loop3: detected capacity change from 0 to 512 [ 295.857702][T16008] EXT4-fs error (device loop3): __ext4_iget:4985: inode #15: block 1803188595: comm syz.3.3136: invalid block [ 295.869948][T16008] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3136: couldn't read orphan inode 15 (err -117) [ 295.936028][T16013] program syz.3.3136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.025946][T16025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3139'. [ 296.052955][T16025] syzkaller0: entered promiscuous mode [ 296.058478][T16025] syzkaller0: entered allmulticast mode [ 296.070798][T16025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3139'. [ 296.082097][T16028] loop3: detected capacity change from 0 to 1024 [ 296.089000][T16028] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 296.174891][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'. [ 296.494966][T16046] loop2: detected capacity change from 0 to 512 [ 296.503004][T16046] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3145: corrupted in-inode xattr: e_value size too large [ 296.517202][T16046] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3145: couldn't read orphan inode 15 (err -117) [ 296.593186][ C0] eth0: bad gso: type: 1, size: 1408 [ 296.633928][T16062] loop4: detected capacity change from 0 to 1024 [ 296.639976][T16071] loop2: detected capacity change from 0 to 4096 [ 296.641117][T16062] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 296.648718][T16071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.660290][T16062] JBD2: no valid journal superblock found [ 296.669313][T16062] EXT4-fs (loop4): Could not load journal inode [ 296.675474][T16071] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #15: comm syz.2.3150: corrupted inode contents [ 296.687952][T16071] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #15: comm syz.2.3150: mark_inode_dirty error [ 296.699607][T16061] dccp_close: ABORT with 80 bytes unread [ 296.699673][T16071] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #15: comm syz.2.3150: corrupted inode contents [ 296.717529][T16071] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.3150: mark_inode_dirty error [ 296.729996][T16071] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #15: comm syz.2.3150: corrupted inode contents [ 296.753914][T16075] syzkaller0: entered promiscuous mode [ 296.756283][T16071] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.3150: mark_inode_dirty error [ 296.759633][T16075] syzkaller0: entered allmulticast mode [ 296.772272][T16071] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #15: comm syz.2.3150: corrupted inode contents [ 296.792375][T16075] __nla_validate_parse: 2 callbacks suppressed [ 296.792389][T16075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3151'. [ 296.806272][T16071] EXT4-fs error (device loop2): ext4_truncate:4241: inode #15: comm syz.2.3150: mark_inode_dirty error [ 296.820755][T16071] EXT4-fs error (device loop2) in ext4_setattr:5553: Corrupt filesystem [ 296.842691][ T29] audit: type=1326 audit(1722510618.787:27342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16069 comm="syz.2.3150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f755bb373b9 code=0x0 [ 296.919421][ T29] audit: type=1326 audit(1722510618.867:27343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.4.3152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb4df773b9 code=0x0 [ 297.015777][ T29] audit: type=1326 audit(1722510618.957:27344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16081 comm="syz.3.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 297.039419][ T29] audit: type=1326 audit(1722510618.957:27345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16081 comm="syz.3.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 297.068689][ T29] audit: type=1326 audit(1722510618.967:27346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16081 comm="syz.3.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 297.092532][ T29] audit: type=1326 audit(1722510618.987:27347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16081 comm="syz.3.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 297.116245][ T29] audit: type=1326 audit(1722510618.987:27348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16081 comm="syz.3.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 297.139872][ T29] audit: type=1326 audit(1722510619.007:27349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16081 comm="syz.3.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaef2b73b9 code=0x7ffc0000 [ 297.163474][ T29] audit: type=1326 audit(1722510619.007:27350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16081 comm="syz.3.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbaef2ae367 code=0x7ffc0000 [ 297.219581][T16100] loop3: detected capacity change from 0 to 512 [ 297.226283][T16100] EXT4-fs: dax option not supported [ 297.498717][T16110] loop0: detected capacity change from 0 to 256 [ 297.505444][T16110] msdos: Unknown parameter 'dotots' [ 297.511708][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'. [ 297.526757][T16110] loop0: detected capacity change from 0 to 1024 [ 297.539257][T16110] loop0: detected capacity change from 0 to 1024 [ 297.557132][T16110] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 297.639835][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'. [ 297.669007][T16124] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3163'. [ 297.870355][T16139] FAULT_INJECTION: forcing a failure. [ 297.870355][T16139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.883680][T16139] CPU: 1 UID: 0 PID: 16139 Comm: syz.3.3168 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 297.894439][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 297.904530][T16139] Call Trace: [ 297.907836][T16139] [ 297.910754][T16139] dump_stack_lvl+0xf2/0x150 [ 297.915525][T16139] dump_stack+0x15/0x20 [ 297.919740][T16139] should_fail_ex+0x229/0x230 [ 297.924412][T16139] should_fail+0xb/0x10 [ 297.928577][T16139] should_fail_usercopy+0x1a/0x20 [ 297.933610][T16139] _copy_from_user+0x1e/0xd0 [ 297.938273][T16139] core_sys_select+0x2e2/0x530 [ 297.943050][T16139] ? set_user_sigmask+0x83/0x190 [ 297.947986][T16139] __se_sys_pselect6+0x213/0x280 [ 297.952960][T16139] ? putname+0xc5/0xe0 [ 297.957054][T16139] __x64_sys_pselect6+0x78/0x90 [ 297.961967][T16139] x64_sys_call+0x1c21/0x2e00 [ 297.966674][T16139] do_syscall_64+0xc9/0x1c0 [ 297.971180][T16139] ? clear_bhb_loop+0x55/0xb0 [ 297.975903][T16139] ? clear_bhb_loop+0x55/0xb0 [ 297.980653][T16139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.986543][T16139] RIP: 0033:0x7fbaef2b73b9 [ 297.990946][T16139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.010578][T16139] RSP: 002b:00007fbaedf37048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 298.019012][T16139] RAX: ffffffffffffffda RBX: 00007fbaef445f80 RCX: 00007fbaef2b73b9 [ 298.027022][T16139] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 298.035128][T16139] RBP: 00007fbaedf370a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.043267][T16139] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 298.051229][T16139] R13: 000000000000004d R14: 00007fbaef445f80 R15: 00007ffe1f8633b8 [ 298.059195][T16139] [ 298.375658][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3174'. [ 298.389719][T16163] bond1: entered promiscuous mode [ 298.397722][T16164] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 298.410377][T16164] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 298.421902][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3174'. [ 298.432910][T16165] bond1 (unregistering): Released all slaves [ 298.479221][T16177] No such timeout policy "syz0" [ 298.502259][T16181] loop1: detected capacity change from 0 to 512 [ 298.518556][T16181] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.531360][T16181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=16181 comm=syz.1.3180 [ 298.673817][T16201] loop1: detected capacity change from 0 to 1024 [ 298.700086][T16209] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3187'. [ 298.793851][T16225] loop4: detected capacity change from 0 to 512 [ 298.821468][T16200] chnl_net:caif_netlink_parms(): no params data found [ 298.861391][T16200] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.868609][T16200] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.877243][T16200] bridge_slave_0: entered allmulticast mode [ 298.883699][T16200] bridge_slave_0: entered promiscuous mode [ 298.891976][T16200] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.899082][T16200] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.908291][T16200] bridge_slave_1: entered allmulticast mode [ 298.914874][T16200] bridge_slave_1: entered promiscuous mode [ 298.938294][T16200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.958297][T16200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.972881][ T6454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.054341][ T6454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.074854][T16200] team0: Port device team_slave_0 added [ 299.082039][T16200] team0: Port device team_slave_1 added [ 299.122637][ T6454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.126386][T16251] loop4: detected capacity change from 0 to 128 [ 299.146824][T16251] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.180812][T16200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.187890][T16200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.214009][T16200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.234334][T16200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.241417][T16200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.267407][T16200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.283269][ T6454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.368351][T16200] hsr_slave_0: entered promiscuous mode [ 299.381202][T16262] loop0: detected capacity change from 0 to 1024 [ 299.386605][T16200] hsr_slave_1: entered promiscuous mode [ 299.393671][T16200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.403065][T16200] Cannot create hsr debugfs directory [ 299.423537][ T6454] bridge_slave_1: left allmulticast mode [ 299.429268][ T6454] bridge_slave_1: left promiscuous mode [ 299.435023][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.457721][ T6454] bridge_slave_0: left allmulticast mode [ 299.463409][ T6454] bridge_slave_0: left promiscuous mode [ 299.469148][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.610088][ T6454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.622448][ T6454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.633893][ T6454] bond0 (unregistering): Released all slaves [ 299.799258][ T6454] hsr_slave_0: left promiscuous mode [ 299.805045][ T6454] hsr_slave_1: left promiscuous mode [ 299.811112][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.818756][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.827013][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.834532][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.847885][ T6454] veth1_macvtap: left promiscuous mode [ 299.853491][ T6454] veth0_macvtap: left promiscuous mode [ 299.859153][ T6454] veth1_vlan: left promiscuous mode [ 299.864392][ T6454] veth0_vlan: left promiscuous mode [ 299.969968][ T6454] team0 (unregistering): Port device team_slave_1 removed [ 299.980843][ T6454] team0 (unregistering): Port device team_slave_0 removed [ 300.054885][T16298] loop3: detected capacity change from 0 to 128 [ 300.063970][T16298] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 300.093458][T16295] loop0: detected capacity change from 0 to 512 [ 300.119299][T16295] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.178683][T16306] loop0: detected capacity change from 0 to 1024 [ 300.258224][T16200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 300.310741][T16200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 300.386179][T16200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 300.408995][T16200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 300.431540][T16314] loop4: detected capacity change from 0 to 512 [ 300.454757][T16314] EXT4-fs: Ignoring removed i_version option [ 300.507562][T16314] ext4: Unknown parameter 'subj_type' [ 300.529643][T16200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.625237][T16314] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3217'. [ 300.637508][T16200] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.657768][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.664895][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.674525][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.681712][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.732805][T16330] loop4: detected capacity change from 0 to 512 [ 300.753918][T16330] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.787169][T16341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16341 comm=syz.1.3223 [ 300.818962][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3224'. [ 300.829387][T16342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16342 comm=syz.1.3223 [ 300.869709][T16200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.899820][ T29] kauditd_printk_skb: 1339 callbacks suppressed [ 300.899834][ T29] audit: type=1400 audit(1722510622.847:28690): avc: denied { create } for pid=16329 comm="syz.4.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.036426][T16200] veth0_vlan: entered promiscuous mode [ 301.052565][T16200] veth1_vlan: entered promiscuous mode [ 301.071407][T16200] veth0_macvtap: entered promiscuous mode [ 301.080580][T16200] veth1_macvtap: entered promiscuous mode [ 301.090808][ T29] audit: type=1400 audit(1722510623.037:28691): avc: denied { setopt } for pid=16355 comm="syz.3.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.102108][T16200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.121068][T16200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.130972][T16200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.141594][T16200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.151532][T16200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.162011][T16200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.171916][T16200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.175800][T16357] loop3: detected capacity change from 0 to 512 [ 301.182346][T16200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.183805][T16200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.193455][T16357] /dev/loop3: Can't open blockdev [ 301.199764][T16200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.221471][T16200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.231309][T16200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.241758][T16200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.251589][T16200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.262009][T16200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.271838][T16200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.282359][T16200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.293855][T16200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.308004][T16200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.316739][T16200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.321237][ T29] audit: type=1326 audit(1722510623.267:28692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.1.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc2fc73b9 code=0x7ffc0000 [ 301.325426][T16200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.357993][T16200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.381847][ T29] audit: type=1326 audit(1722510623.297:28693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.1.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc2fc73b9 code=0x7ffc0000 [ 301.390487][T16365] loop3: detected capacity change from 0 to 1024 [ 301.405570][ T29] audit: type=1326 audit(1722510623.297:28694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.1.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febc2fc73b9 code=0x7ffc0000 [ 301.435541][ T29] audit: type=1326 audit(1722510623.307:28695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.1.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc2fc73b9 code=0x7ffc0000 [ 301.459323][ T29] audit: type=1326 audit(1722510623.307:28696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.1.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febc2fc73b9 code=0x7ffc0000 [ 301.483099][ T29] audit: type=1326 audit(1722510623.317:28697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.1.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc2fc73b9 code=0x7ffc0000 [ 301.506807][ T29] audit: type=1326 audit(1722510623.317:28698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.1.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febc2fbe367 code=0x7ffc0000 [ 301.530422][ T29] audit: type=1326 audit(1722510623.317:28699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.1.3226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febc2f62d09 code=0x7ffc0000 [ 301.622642][T16378] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 301.625188][T16376] loop2: detected capacity change from 0 to 2048 [ 301.671509][T16376] EXT4-fs (loop2): shut down requested (2) [ 301.725402][T16400] loop0: detected capacity change from 0 to 512 [ 301.812458][T16407] loop2: detected capacity change from 0 to 1024 [ 301.821290][T16414] loop0: detected capacity change from 0 to 1024 [ 301.828108][T16407] EXT4-fs: Ignoring removed orlov option [ 301.833792][T16407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.857669][T16407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 301.865775][T16407] System zones: 0-1, 3-36 [ 301.983679][T16436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3243'. [ 302.000118][T16423] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.007372][T16423] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.038620][T16423] bridge_slave_1: left allmulticast mode [ 302.044316][T16423] bridge_slave_1: left promiscuous mode [ 302.045903][T16440] sctp: [Deprecated]: syz.2.3245 (pid 16440) Use of int in max_burst socket option deprecated. [ 302.045903][T16440] Use struct sctp_assoc_value instead [ 302.050009][T16423] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.075257][T16423] bridge_slave_0: left allmulticast mode [ 302.081041][T16423] bridge_slave_0: left promiscuous mode [ 302.087028][T16423] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.217935][T16453] loop0: detected capacity change from 0 to 512 [ 302.225216][T16453] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 302.231820][T16453] EXT4-fs (loop0): mount failed [ 302.239319][T16453] loop0: detected capacity change from 0 to 256 [ 302.246454][T16453] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.329439][T16466] loop4: detected capacity change from 0 to 128 [ 302.413674][T16477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3257'. [ 302.660068][T16503] xt_CONNSECMARK: invalid mode: 0 [ 302.673042][T16503] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 302.789579][T16526] loop7: detected capacity change from 0 to 16384 [ 302.988195][ C0] eth0: bad gso: type: 1, size: 1408 [ 303.041307][T16551] loop1: detected capacity change from 0 to 1024 [ 303.084216][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3281'. [ 303.093323][T16551] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 303.175812][T16551] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 303.191651][T16551] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1024 with error 28 [ 303.204155][T16551] EXT4-fs (loop1): This should not happen!! Data will be lost [ 303.204155][T16551] [ 303.213973][T16551] EXT4-fs (loop1): Total free blocks count 0 [ 303.220015][T16551] EXT4-fs (loop1): Free/Dirty block details [ 303.225904][T16551] EXT4-fs (loop1): free_blocks=68451041280 [ 303.231736][T16551] EXT4-fs (loop1): dirty_blocks=1024 [ 303.237143][T16551] EXT4-fs (loop1): Block reservation details [ 303.243206][T16551] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 303.358075][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'. [ 303.461897][T16584] loop1: detected capacity change from 0 to 256 [ 303.540097][T16591] team0: Device ipvlan2 failed to register rx_handler [ 303.642660][T16596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3294'. [ 303.847725][T16606] Invalid ELF header magic: != ELF [ 304.215995][T16610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3298'. [ 304.300779][T16617] loop2: detected capacity change from 0 to 512 [ 304.307666][T16617] EXT4-fs: Ignoring removed oldalloc option [ 304.314535][T16617] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 304.322558][T16617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=84fc01c, mo2=0002] [ 304.330909][T16617] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 304.340701][T16617] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 304.352018][T16617] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3300: dx entry: limit 65535 != root limit 120 [ 304.364159][T16617] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3300: Corrupt directory, running e2fsck is recommended [ 304.379014][T16617] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.3300: path /13/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 304.422213][T16621] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 8, id = 0 [ 304.492303][T16622] loop2: detected capacity change from 0 to 1024 [ 304.521253][T16622] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3301: bad orphan inode 1536 [ 304.543542][T16622] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 304.643200][T16637] loop4: detected capacity change from 0 to 128 [ 304.652231][T16637] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.760363][T16645] loop4: detected capacity change from 0 to 2048 [ 304.770584][T16645] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 304.784302][T16645] System zones: 0-4 [ 304.812099][T16649] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3309'. [ 304.823055][T16649] loop4: detected capacity change from 0 to 256 [ 304.960023][T16654] loop4: detected capacity change from 0 to 512 [ 304.967113][T16654] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 304.987651][T16654] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.176674][T16662] loop4: detected capacity change from 0 to 1024 [ 305.183269][T16662] EXT4-fs: Ignoring removed bh option [ 305.189150][T16662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 305.277269][ C0] eth0: bad gso: type: 1, size: 1408 [ 305.283034][ C0] eth0: bad gso: type: 1, size: 1408 [ 305.578010][T16678] qrtr: Invalid version 0 [ 305.649310][T16691] netlink: 'syz.4.3322': attribute type 10 has an invalid length. [ 305.668149][T16691] IPVS: length: 126 != 8 [ 305.694671][T16694] loop4: detected capacity change from 0 to 512 [ 305.702414][T16694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 305.713786][T16694] EXT4-fs (loop4): can't mount with commit=2226, fs mounted w/o journal [ 305.783271][T16704] loop1: detected capacity change from 0 to 512 [ 305.797449][T16704] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 305.803901][T16703] loop4: detected capacity change from 0 to 8192 [ 305.814922][T16704] EXT4-fs (loop1): 1 truncate cleaned up [ 305.857559][T16703] loop4: p2 p3 p4 [ 305.861644][T16703] loop4: p2 start 452985600 is beyond EOD, truncated [ 305.868428][T16703] loop4: p3 start 4177527808 is beyond EOD, truncated [ 305.875219][T16703] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 306.054780][ T29] kauditd_printk_skb: 954 callbacks suppressed [ 306.054795][ T29] audit: type=1400 audit(1722510627.997:29654): avc: denied { getopt } for pid=16672 comm="syz.2.3317" lport=50911 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 306.448235][T16714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3328'. [ 306.462076][T16713] loop2: detected capacity change from 0 to 1024 [ 306.468783][T16713] EXT4-fs: Ignoring removed orlov option [ 306.474725][T16713] EXT4-fs (loop2): unsupported descriptor size 8 [ 306.531717][T16727] loop2: detected capacity change from 0 to 1024 [ 306.538530][T16727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.587009][T16735] loop2: detected capacity change from 0 to 512 [ 306.598807][T16735] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.620319][T16735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3335'. [ 306.629436][T16735] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 306.659066][T16735] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 306.669949][T16735] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 306.679417][T16735] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.3335: Failed to acquire dquot type 0 [ 306.758304][T16747] loop4: detected capacity change from 0 to 128 [ 306.915672][T16768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3338'. [ 306.930101][T16768] loop2: detected capacity change from 0 to 256 [ 306.937207][T16768] FAT-fs (loop2): bogus sectors per cluster 0 [ 306.943273][T16768] FAT-fs (loop2): Can't find a valid FAT filesystem [ 306.955231][T16767] loop1: detected capacity change from 0 to 2048 [ 306.989214][T16767] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 307.004276][T16767] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 307.016586][T16767] EXT4-fs (loop1): This should not happen!! Data will be lost [ 307.016586][T16767] [ 307.026241][T16767] EXT4-fs (loop1): Total free blocks count 0 [ 307.032361][T16767] EXT4-fs (loop1): Free/Dirty block details [ 307.038294][T16767] EXT4-fs (loop1): free_blocks=2415919104 [ 307.044012][T16767] EXT4-fs (loop1): dirty_blocks=16 [ 307.049174][T16767] EXT4-fs (loop1): Block reservation details [ 307.055211][T16767] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 307.061330][ T29] audit: type=1400 audit(1722510628.997:29655): avc: denied { listen } for pid=16775 comm="syz.4.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 307.086672][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 307.095716][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 307.157925][T16788] bond0: entered promiscuous mode [ 307.264577][T16788] bond0: left promiscuous mode [ 307.891615][T16802] openvswitch: netlink: IPv4 tunnel dst address is zero [ 307.900367][ T29] audit: type=1400 audit(1722510629.847:29656): avc: granted { setsecparam } for pid=16801 comm="syz.4.3351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 307.929420][T16802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.992224][T16802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.019805][ T29] audit: type=1326 audit(1722510629.967:29657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.1.3352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febc2fc73b9 code=0x0 [ 308.049913][T16802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.100797][T16802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.153127][T16802] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.164296][T16802] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.175936][T16802] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.188365][T16802] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.253971][ T29] audit: type=1400 audit(1722510630.197:29658): avc: denied { unmount } for pid=15092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 308.280710][ T29] audit: type=1400 audit(1722510630.207:29659): avc: denied { recv } for pid=16807 comm="syz.1.3352" saddr=10.128.0.163 src=30030 daddr=10.128.1.78 dest=43158 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 308.306263][ T29] audit: type=1400 audit(1722510630.227:29660): avc: denied { read write } for pid=15092 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.330582][ T29] audit: type=1400 audit(1722510630.227:29661): avc: denied { open } for pid=15092 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.367952][T16819] loop4: detected capacity change from 0 to 512 [ 308.374554][T16819] ext4: Bad value for 'journal_dev' [ 308.569872][T16831] loop4: detected capacity change from 0 to 1024 [ 308.649276][T16841] netlink: 'syz.4.3361': attribute type 1 has an invalid length. [ 308.660956][T16841] loop4: detected capacity change from 0 to 512 [ 308.667603][T16841] ext4: Unknown parameter 'noacl' [ 308.929980][T16847] loop2: detected capacity change from 0 to 512 [ 308.957189][T16847] EXT4-fs: Invalid want_extra_isize 7 [ 309.133069][T16858] loop2: detected capacity change from 0 to 512 [ 309.151003][T16852] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3366'. [ 309.161479][T16858] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 309.169646][T16858] System zones: 0-2, 18-18, 34-35 [ 309.175214][T16858] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 309.191027][T16858] EXT4-fs (loop2): mount failed [ 309.217274][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 309.218183][T16863] loop1: detected capacity change from 0 to 1024 [ 309.338828][T16878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3370'. [ 309.518449][T16890] loop1: detected capacity change from 0 to 512 [ 309.527646][T16890] loop1: detected capacity change from 0 to 256 [ 309.534126][T16890] vfat: Unknown parameter 'tYZ¸cÔŽűnonumtail' [ 310.186719][T16915] loop2: detected capacity change from 0 to 512 [ 310.198325][T16915] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.271871][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 310.290387][ C0] eth0: bad gso: type: 1, size: 1408 [ 310.335948][T16921] loop2: detected capacity change from 0 to 1024 [ 310.355936][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3381'. [ 310.757452][T16948] loop2: detected capacity change from 0 to 1024 [ 310.791177][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'. [ 310.813582][T16955] loop2: detected capacity change from 0 to 128 [ 310.820253][T16955] vfat: Unknown parameter '0x000000000000000f' [ 310.942724][ C0] eth0: bad gso: type: 1, size: 1408 [ 310.952504][T16965] loop1: detected capacity change from 0 to 1024 [ 311.045634][ T8893] ================================================================== [ 311.053745][ T8893] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 311.061299][ T8893] [ 311.063610][ T8893] read-write to 0xffff888237d2b370 of 1 bytes by task 16934 on cpu 1: [ 311.071750][ T8893] mlock_new_folio+0x114/0x200 [ 311.076522][ T8893] folio_add_lru_vma+0x5d/0x60 [ 311.081283][ T8893] handle_mm_fault+0x2372/0x2940 [ 311.086222][ T8893] __get_user_pages+0x499/0x10d0 [ 311.091164][ T8893] __mm_populate+0x25b/0x3b0 [ 311.095765][ T8893] __se_sys_mremap+0x960/0xf20 [ 311.100526][ T8893] __x64_sys_mremap+0x67/0x80 [ 311.105447][ T8893] x64_sys_call+0x29c8/0x2e00 [ 311.110126][ T8893] do_syscall_64+0xc9/0x1c0 [ 311.114652][ T8893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.120641][ T8893] [ 311.122955][ T8893] read to 0xffff888237d2b370 of 1 bytes by task 8893 on cpu 0: [ 311.130502][ T8893] need_mlock_drain+0x30/0x50 [ 311.135185][ T8893] __lru_add_drain_all+0x235/0x410 [ 311.140392][ T8893] lru_add_drain_all+0x10/0x20 [ 311.145160][ T8893] invalidate_bdev+0x47/0x70 [ 311.149757][ T8893] ext4_put_super+0x571/0x840 [ 311.154438][ T8893] generic_shutdown_super+0xde/0x210 [ 311.159729][ T8893] kill_block_super+0x2a/0x70 [ 311.164408][ T8893] ext4_kill_sb+0x44/0x80 [ 311.168741][ T8893] deactivate_locked_super+0x7d/0x1c0 [ 311.174124][ T8893] deactivate_super+0x9f/0xb0 [ 311.178804][ T8893] cleanup_mnt+0x268/0x2e0 [ 311.183223][ T8893] __cleanup_mnt+0x19/0x20 [ 311.188154][ T8893] task_work_run+0x13a/0x1a0 [ 311.192722][ T8893] syscall_exit_to_user_mode+0xbe/0x130 [ 311.198249][ T8893] do_syscall_64+0xd6/0x1c0 [ 311.202742][ T8893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.208624][ T8893] [ 311.210928][ T8893] value changed: 0x09 -> 0x0a [ 311.215580][ T8893] [ 311.217881][ T8893] Reported by Kernel Concurrency Sanitizer on: [ 311.224005][ T8893] CPU: 0 UID: 0 PID: 8893 Comm: syz-executor Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 311.234829][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 311.244872][ T8893] ================================================================== [ 311.267248][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 311.267263][ T29] audit: type=1400 audit(1722510633.217:29763): avc: denied { write } for pid=16968 comm="syz.1.3394" path="socket:[65965]" dev="sockfs" ino=65965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.862896][ T6451] bridge_slave_1: left allmulticast mode [ 315.868631][ T6451] bridge_slave_1: left promiscuous mode [ 315.874466][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.882728][ T6451] bridge_slave_0: left allmulticast mode [ 315.888396][ T6451] bridge_slave_0: left promiscuous mode [ 315.894093][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.955932][ T6451] dvmrp0 (unregistering): left allmulticast mode [ 316.058576][ T6451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.068892][ T6451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.079507][ T6451] bond0 (unregistering): Released all slaves [ 316.088027][ T6451] bond1 (unregistering): Released all slaves [ 316.159319][ T6451] hsr_slave_0: left promiscuous mode [ 316.164844][ T6451] hsr_slave_1: left promiscuous mode [ 316.171968][ T6451] veth1_macvtap: left promiscuous mode [ 316.177507][ T6451] veth0_macvtap: left promiscuous mode [ 316.183071][ T6451] veth1_vlan: left promiscuous mode [ 316.188403][ T6451] veth0_vlan: left promiscuous mode [ 316.280706][ T6451] team0 (unregistering): Port device team_slave_1 removed [ 316.291650][ T6451] team0 (unregistering): Port device team_slave_0 removed