last executing test programs: 3.86006292s ago: executing program 4 (id=2568): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f000000a2c0)={0x0, 0x0, &(0x7f000000a280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020300000000000000092cf27699b7000000000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000007400)={0x0, 0x0, &(0x7f00000073c0)={&(0x7f0000007380)={0x20, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}]}, 0x20}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newae={0x94, 0x1e, 0x4, 0x70bd26, 0x25dfdbfd, {{@in=@remote, 0x4d3, 0x2, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3, 0x3505}, [@lifetime_val={0x24, 0x9, {0x400000, 0x8000000, 0x3}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in6=@remote, 0xa, 0x5, 0x1}}]}, 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r2]}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0), 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0xfffffff8, 0x6, 0x3c, 0xffffff01}, 0x10) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x100000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4) 3.821676583s ago: executing program 4 (id=2571): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r0, 0x127f, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)={r1, r2+10000000}) syz_emit_ethernet(0xe1, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a80000010000000800450000b60000000000069078ac1414bbe000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3c00000090780000080a00000000000000001312c851616c0500cb080000000000e79490050e000000000000000000000000080a00000000000000001e030400d4a85f83652d15ee54ab3fd72eb088339144707568b7a0b4ee272c9ef1f73c924d37886d2015fc05079d0f4f4519070069be22a901bddfefa6f1919cb0d6b750706cee06f57daea6b2aae721320b5cf70b8391fc3543bec36a63d3f470c3f8e827fd9274492b4de1a75e71"], 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0xf, 0x4, @tid=r5}, &(0x7f0000000080)) capget(&(0x7f0000000240)={0x19980330, r5}, &(0x7f0000000280)={0x2a5d, 0x2, 0x1000, 0xc, 0x0, 0xcb8}) mkdirat(r4, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f00000013c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000500)='.\x00', 0x0, 0x0) r7 = open(&(0x7f00000025c0)='./file0\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0xe, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d030000000000000000000000000000000000000b00000000000000000000000604"], 0x0, 0x46, 0x0, 0x1}, 0x20) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x0, 0x1, 0x800, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r11, &(0x7f0000000040)="d0ce", 0x2}]) 3.820930793s ago: executing program 4 (id=2572): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000007500), 0x0, 0x10002, 0x0) 3.769594407s ago: executing program 4 (id=2573): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.763873948s ago: executing program 4 (id=2575): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5ae, &(0x7f0000001280)="$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") 3.742332549s ago: executing program 4 (id=2576): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2}, 0x14) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) ptrace(0x10, 0x1) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x0, 0x1, 0x5e}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000940)={[{@nodiscard}, {}, {@auto_da_alloc_val}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@debug}]}, 0x5, 0x57a, &(0x7f0000000a00)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f0000000540), 0x0}, 0x20) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r8, 0x80080400) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r9, 0x10d, 0x98, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.445454863s ago: executing program 0 (id=2582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000016000000000000000000850000009e00000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='gfs2\x00', 0xc00000, &(0x7f00000003c0)='/(.{[$\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$VT_RESIZE(r4, 0x4b67, &(0x7f0000000880)) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) r5 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000280)={&(0x7f0000000180)=""/254, 0xfe}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000006c0)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\x00>\xf9\x9c\x83s1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', &(0x7f0000000000)='t+\xdb\xaaU\x8e\xd6\x9b\xaar\xa1\xf7\xf1\xfa\xed\r\f:\xef\xff\xa7x kT\x14\xaf\xe9\xf2G\x85h\x8a\x05\xd9\xa9\xf8\xb1O0\x05\xee\xc5\x81\xfd\xa5\x99\xfe\x81\xf2\xde>\xcdF8\xd2x\xb4\x05\xf8\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x81n\n.\xd0;7\xd6\xc5', 0x0) readv(r5, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) 3.445047873s ago: executing program 0 (id=2583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xffffffffffffffe2) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x600}, 0x0) r0 = io_uring_setup(0x30e, &(0x7f0000000100)={0x0, 0x6b50, 0x100, 0x2, 0x3ab}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r2, 0x1) syz_io_uring_setup(0x17ac, &(0x7f00000015c0), 0x0, 0x0) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xffffffff, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x24}}, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f00000035c0)=@ethtool_gstrings={0x1b, 0x8}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) 2.557626904s ago: executing program 0 (id=2598): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x7, 0x9, 0x41}, 0x6e) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) setreuid(0xee01, 0xee01) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x62) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0xfedd) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="4f7e949e1e3c067e63c739492945b2bedf3f2b79740646327001cdef30927ac9dfc9ae47bc193f142c681f144d96767f603d89004061565d6808f2642a7107691f6da42c30ad0f8ef10900d02108ac5f2076703ad7b3e061792cb2db80f73441a258d358fcc195db5758929601f7", 0x6e, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') close_range(0xffffffffffffffff, r1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x2, @empty}, 0x1c) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x4) 2.555868634s ago: executing program 3 (id=2600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mbind(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100)=0x9, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0x708c5000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0x6, 0x7, 0x81, r3, 0x40, '\x00', 0x0, r3, 0x4, 0x0, 0x0, 0xe}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x20000000000000f4, &(0x7f0000000240)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x9, 0xfec, &(0x7f0000000d00)=""/4076}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0), 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000700)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0xfe, 0xfe, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x1d, 0x2, 0x6) getsockopt$bt_BT_SECURITY(r4, 0x6a, 0x5, 0x0, 0x205fffff) 2.544867666s ago: executing program 3 (id=2601): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = io_uring_setup(0xfb7, &(0x7f0000000040)={0x0, 0x4edb, 0x400, 0x2, 0x303}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@dstopts={{0x18}}], 0x18}}], 0x1, 0x0) 2.536956826s ago: executing program 3 (id=2602): socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x88a8, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) 2.48543223s ago: executing program 3 (id=2603): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="44000000000000002dbd7000000000004f6ff1dcca4e86c85d3c0f7702cd7d4d1773b149ed2bf329abee8fad152000000c2bba7e44292cdeaba48a0c2649316855ff0000304324ba0dc93f89d7ebe2e8799eebfcf58b462e274c086c59f7ebe12c8e11f38391487ebc6362d259ccf17d2398786d72b1a7ff83d35ebb90a0eb8b8989a42193f6700bf79c90ba5a0fc15db651bee5f9098f0dae90ef38986c872d465518238d2c3c1c9515e13d4846a82bc83107542577366d8158c707c3c73a2892a67b47532f1868b749476e12760677b5afcb82dcc8c4d1aa5ef7e2d0fb9c41d380a4b8b864458f14e83a269ce6655a28ae5b7847ff5896e5785d18"], 0x44}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf9}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) unshare(0x24020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fsync(r2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) r3 = dup(r0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x10, 0x80805, 0x200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000020601040000000000000000a473f828f41b6a0a000007100003006269746d61703a706f72740005"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000480)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x82, &(0x7f0000000000)={r6}, &(0x7f0000000200)=0x8) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0x9}}}, 0x84) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000015c0), 0x100, 0x0) 1.949505823s ago: executing program 1 (id=2616): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) unshare(0x22020600) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000140)={{r0}, "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"}) bind$bt_hci(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) 1.948906673s ago: executing program 1 (id=2618): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x8004) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xe, 0x0, &(0x7f00000002c0)) 1.943163033s ago: executing program 1 (id=2619): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x200, 0x0, 0x3}, 0x48) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) prlimit64(r1, 0xa, &(0x7f0000000140)={0x8, 0x8f}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x7fffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0xffffffffffffffff) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x40f00}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) kexec_load(0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x7, 0x0, 0x0, 0x4, 0x1, 0xff}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e, 0x61]}}, &(0x7f00000001c0)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) socket$inet6(0xa, 0x3, 0x8) 1.791341636s ago: executing program 2 (id=2623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000540)='./file2\x00', r1, &(0x7f0000000040)='./file2\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x87, 0x6, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80, 0x7, 0x401, 0x1}}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/rfcomm\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty}, &(0x7f0000000340)=0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) r2 = socket$caif_stream(0x25, 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r2}, {}], 0x2, 0x0, 0x0, 0x9) r3 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r3, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=r3}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) getsockopt(r5, 0x10e, 0x8, 0x0, &(0x7f0000000040)) 1.726606331s ago: executing program 0 (id=2624): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x3d29, 0x9, 0x9, 0xffffffffffffffff, 0xb66c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0xd}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=r1, @ANYBLOB="c97112a106ab385a82ff9d5a254052840c25bb3d41c4e234df590d21adf5e21fb2f5fccd3db05601af3f45eb98a412e9751d3a5c88acc2536299dc18ac5cc4795415830f8754d7a9026b5e2f3888f8199dd0c684967cffa573bd25523e0f68f72229fa202017ae32dd23775e0b94082685938c51dce3515ab8e56fb4e7259f4492738b44664f5881e63a68d002ca4c4e3678a6f55a2e7a2b01442cc3b1ee4aeca4b0d863981ee5d980572baac3f8a0658a7b1daa9105c9e41bcdda0b2f2c385c839ce4ab0229666bc17a70f38fc3e4233beefc2d9315", @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES64=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000400)=[{0x0}], 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x11}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = socket(0x1f, 0x5, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000480)={r7, @in={{0x2, 0x0, @empty}}}, 0x90) r8 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r8, 0x291c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r11, 0x84, 0x2, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f00003a8000/0x2000)=nil, 0x2000, 0x0, 0x11, r12, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000680002000000000000000000020000000400000004000400"], 0x1c}}, 0x8c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) 1.677078025s ago: executing program 3 (id=2625): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000007500)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10002, 0x0) 1.676695055s ago: executing program 3 (id=2626): mmap(&(0x7f00006f3000/0x4000)=nil, 0x4000, 0xf, 0x4008031, 0xffffffffffffffff, 0xe4273000) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x32f, &(0x7f00000008c0)="$eJzs3c9LI2cYwPEnP4xJxEwOpaWF4kt7aXsYNO25EIpCaaCiplQLhVEnbcg0kUywpJRqT72W/ge99CAevQnd/Qe87G33spe9eVnYw8oiO0vmhyYxie6YbHT9fkDmnTzvM3lfEsPzhpnJ8fd//1Ip2XrJaEg0qSQiInIikpWoBCL+Nuq2E9JuVz6devbww+XVtW/yhcL8klIL+ZXPc0qpzMz/v/6e8rsdTspR9sfjp7knR+8evX/8cuXnsq3KtqrWGspQ67XHDWPdMtVm2a7oSi1apmGbqly1zboXr3nxklXb2moqo7o5nd6qm7atjGpTVcymatRUo95Uxk9Guap0XVfTaekl0fPRu6q4t7Rk5EMmbwx5MAjrheM4A8JOJG/ERCR1IVLcG+m4AADAjdRV/8fckj5U/S8Zt/5vdT6v//c/ut+Y+u4g49f/h4le9f8Xj7xjddT/SREZav2f7DH7ixXRrbfzOp2vVf/jZpi5uKaNdOxF63kj7f//uv78YX/WbVD/AwAAAAAAAAAAAAAAAAAAAABwG5w4juY4jhZs/b/Pznt4j41zjBidPq+/NulfMRXsj3ucGI3l1TVJuhfuxTMi1l/bxe2it/XjQcdZ0eTUfT/4Wu3gyiPVkpV71o6fv7NdjLmRfEnKYokpc6JJtjvfcRa+LszPKY+ff3ahXro9PyeavNM7P9eZ7z9/Qj75uC1fF00ebEhNLNlsva9PnbP8P+aU+urbQld+yu0HAAAAAMDbQFeqtQzuu37XdRXoinv5Z+vrzu8HRNrW57M91+dx7YP4eOcOAAAAAMBdYTd/qxiWZdYHNFJyeZ/wjXi49IlBfWJtM+wIyW7fKSf8OwSPbqYDGsGJFJVEWygp//pn4YQ5cjD/0Yw5KmGyZsSZ9EZ1nWcPvjbq10cWR/16xfuE3vvnv+fhjhzx79rbHvryIHnJTEfWmLjSh4cTG8InEAAAAIA3JSj6U7a7G7liWq8f0wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACENuA1YfFi3Exv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICb4lUAAAD//1nfAQ0=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xfffffe4d, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) capset(0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa}}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.011476848s ago: executing program 1 (id=2627): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000011c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {}, {0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6a9f2dde142c605d}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xb000000) 906.411347ms ago: executing program 2 (id=2628): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {0x4}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x13, &(0x7f0000000580)=ANY=[@ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x59, &(0x7f00000000c0)=""/89, 0x41000, 0x1, '\x00', r4, 0x3, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xa, 0x20, 0x5822}, 0x10, 0x0, r3, 0x5, 0x0, &(0x7f0000000640)=[{0x1, 0x2, 0x401, 0x8}, {0x3, 0x2, 0x6, 0xc}, {0x0, 0x1, 0xd, 0x2}, {0x2, 0x2, 0x9, 0xb}, {0x1}], 0x10, 0xd51}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x59, &(0x7f00000000c0)=""/89, 0x41000, 0x1, '\x00', r4, 0x3, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xa, 0x20, 0x5822}, 0x10, 0x0, r3, 0x5, 0x0, &(0x7f0000000640)=[{0x1, 0x2, 0x401, 0x8}, {0x3, 0x2, 0x6, 0xc}, {0x0, 0x1, 0xd, 0x2}, {0x2, 0x2, 0x9, 0xb}, {0x1}], 0x10, 0xd51}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40286608, &(0x7f0000000540)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000340)='.\x00', 0xa50003d1) (async) inotify_add_watch(r8, &(0x7f0000000340)='.\x00', 0xa50003d1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket(0x2, 0x80805, 0x0) 906.031617ms ago: executing program 1 (id=2629): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") ioprio_set$pid(0x1, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x1e927f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000380)="274d14a442a25e03a5b24f5c3c23e29be2be989b68a423062bda362e30ce204eaadc24c5b2469c54d07125ea410235127735e5bad6d7aac13cf86d31bcc249814006fcc4c7725fdb68e93fa806233b8ddb5ac8832a7cacb1b6d137d909ccb6616aa76c67497852d137e4aee801e111ca3a593b", 0x73, r0}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111280000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b000000850000000600000018450000faffffff000000000000000000110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000184400000500000000000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) syz_emit_ethernet(0x5d, &(0x7f0000000800)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x1, 0x32, 0x4f, 0x66, 0x0, 0xfd, 0x6, 0x0, @remote, @multicast1, {[@rr={0x7, 0x7, 0x63, [@loopback]}]}}, @payload_mcast={{{{{{0x33, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x2, 0x0, 0x0, 0x3, 0x4, 0x4, 0x1, 0x0, 0x6, 0x3, 0x4e21, 0x4e21}, 0x2, 0x1}, 0x3, 0x2}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012801900090062676e6400020000000000000500150002000000"], 0x3c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f00000000c0)={[{@nolazytime}, {@nombcache}, {@block_validity}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@nodelalloc}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x8, 0x1, 0x2574, 0xffffffffffffffff, 0x101, '\x00', 0x0, r0, 0x1, 0x0, 0x2, 0x4}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r7, 0x80047456, 0x20000000) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) 901.979668ms ago: executing program 0 (id=2630): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000011c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x3000000) 841.074752ms ago: executing program 0 (id=2631): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="059f80f3ea7b119fe93daaa7c808d49a", 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ff"], 0x28}}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, 0x0, &(0x7f00000005c0)=r3}, 0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x20, 0x0, 0x8, 0x8000, {{0x3a, 0x4, 0x3, 0x3, 0xe8, 0x68, 0x0, 0x1, 0x4, 0x0, @local, @remote, {[@cipso={0x86, 0x1e, 0x1, [{0x5, 0x6, "c683f87e"}, {0x1, 0x12, "401cb00879eb5cf50bbab4e94484a1ae"}]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x18, 0x8d, 0x0, 0x5, [0x0, 0x10001, 0x7fff, 0x80000001, 0x2]}, @generic={0x89, 0x10, "9b090fab2a25c686b3be8ac87b11"}, @timestamp={0x44, 0x14, 0x23, 0x0, 0xc, [0x4, 0x2e9, 0x100, 0x3]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x70, 0x1, [{0x6, 0x2}, {0x1, 0xa, "f0c8e7a33076171c"}, {0x6, 0x6, "56294994"}, {0x1, 0xb, "7d2d25f1d39dad369e"}, {0x2, 0xb, "0a454d9ccc00fad397"}, {0x6, 0xd, "536979749b114e80b94423"}, {0x5, 0x7, "46599ca8e5"}, {0x5, 0x11, "dbbff89cb9280aed13b22d493a5bb0"}, {0x2, 0xd, "a7ef3f6c17f8af2bb8dc93"}, {0x2, 0x10, "5b1c842f5a4fb4d6c2ab2086d05a"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7, 0x80, 0x3, 0x6, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast2, @empty, {[@noop, @rr={0x7, 0x7, 0x10, [@remote]}, @lsrr={0x83, 0x1b, 0x37, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @loopback, @broadcast, @multicast1]}, @generic={0x86, 0x12, "3edce22a6bef9216a550f930427d3d98"}, @end]}}}}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf4, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x21}, 0x40800) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000200000f9f7b79aa35666000000000004000000000000001000"/43], 0x24, 0x0) 247.40546ms ago: executing program 2 (id=2632): r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffea, &(0x7f0000000740)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="40000000100005", @ANYBLOB, @ANYRES32=0x0], 0x40}}, 0x0) 224.489652ms ago: executing program 2 (id=2633): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46c7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1822}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x15, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffff7f00000000b60500cca424db8ad06bb600005344c861600f617e9f6e39ab000000040010000000352be80001000000dc54ffffe8ffffff184400000700"/80], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x28, &(0x7f0000000440)=""/40, 0x41100, 0x12, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000021c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000002200)={0x3, 0xc, 0x54aec379, 0xffff}, 0x10, 0x0, r1, 0x0, &(0x7f0000002580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xd145}, 0x90) (async) r2 = getpid() (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffee6) (async) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="a4e3dd88697b0b11d5a1d03f82497e476785379ad0be230136e7e530e40660778207c67b024c58f4279c5bcd36b25c9f23a87950aa59ae7c04cc540d930dbc4444f222c29b5826657bbd4520dcbfee6a595c9383633c4f7530251cbdee0652acfab035685197fc6d294812aef4", 0x6d}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b8b8262ca1170dfed31b284b8fad4df39d177fd8911b4077291b073fdfac4a553aef3c18568e0922eae12c62e8c472ccb2f6ebc60fce74f64a503300dff0c226a552757ae12898e95818a38858d6ac3b2cf8f8a4e301d02b658c3f557205d8a8e88e88c5006a7a15e32635b7d51c34aa7c4aa35a59dd1e63ea4ea509b35a165a8a0986ea318c340397d42070870c7b38a46b260ed1f93b8ae84e692e5e8c6dc60e7ecb14684a851738dbe6d0dd6383111d77d7173cecb3b5f08fcbe4eeab90ac278c72e9c1bbe7e2706c65a53bf928cf155d1934434791f1ba25c321884bcf68f43391905af7ae35045bd3a18af44eeabffa68", @ANYRES32=0x0], 0x60}, 0x8000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x5}, 0x8400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_freezer_state(r6, 0x0, 0x2, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r8, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00000800e1ffffff850000007000000001c80500050030c428e70211ee7b3ca4f644cb3c000033208000516398f49d910002f0ffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000000a40)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x1e, r4, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x401, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r8, r5, 0xffffffffffffffff]}, 0x90) (async) write$cgroup_freezer_state(r7, &(0x7f0000000680)='FREEZING\x00', 0x9) (async) openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.idle\x00', 0x2, 0x0) (async, rerun: 64) mkdirat$cgroup(r6, &(0x7f0000000100)='syz1\x00', 0x1ff) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000b40)=@sco={0x1f, @none}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000600)=""/49, 0x31}, {&(0x7f0000000e80)=""/71, 0x47}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/145, 0x91}, {&(0x7f0000000700)=""/96, 0x60}], 0x5, &(0x7f0000000a00)}, 0x10000) (async) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r9 = openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) (async) write$cgroup_type(r5, &(0x7f00000006c0), 0x9) 141.440238ms ago: executing program 2 (id=2634): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2cc, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x154, 0x11d, 0x0, 0x1, [{0x150, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x150, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xfc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE={0x14}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}]}, 0x2cc}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x86, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000000540)=""/96, 0xa00000000000000}, 0x20) 140.568099ms ago: executing program 2 (id=2635): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000b00)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x40286608, 0x0) r7 = dup(r5) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7454a8057759de1ac8f9a7216e733dbc7a3bf8d4873f957b31bcdbab79710ba3a96d6d124b43afe5201e0ea45d03183cc3a24f94f9091fa32b7edb381673febe2f5f4a228458613d7132cc89a3e0ce6925fc9d597019ba294ad9f5f9d0178db0d91ab56b20e3a43d1118b20c45ff33b5375d746fa6130ac0ca217a4074b7b59e069c7bfc6010481db8f6e2154a496537855706d32ddb3c14fe0df95dd092beb33df8250313a28a0bdd868cb718262426ed3cf66f1097e7a828ee738d4485a000efea2c76a7f4164ff88d623af8fccf1b75", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)}], 0x1}, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac010000170000000000000000000000000000000000000000000000000000000000000000000000fc010000000000000000000000000000fc020000000000000000000000000000e00000010000000000000000000000000000000000000000000000000c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000528800000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000010000000000000000"], 0x1ac}}, 0x0) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c8366646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',k']) ioperm(0x0, 0x40, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) 0s ago: executing program 1 (id=2636): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)) mount$nfs(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x280000, &(0x7f00000000c0)={[{'\xff\xff'}, {'[+\\,\''}, {'/X'}, {}, {'\xff\xff'}], [{@obj_role}]}) syz_emit_ethernet(0x66, &(0x7f0000000a40)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x2c, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@jumbo, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r1 = socket$inet(0xa, 0x801, 0x84) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r2, 0xffffffffffffffff, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) flock(0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010300"/20], 0x14}}, 0x0) kernel console output (not intermixed with test programs): .689250][ T9739] __x64_sys_sendto+0x78/0x90 [ 131.693921][ T9739] x64_sys_call+0x16d7/0x2d70 [ 131.698637][ T9739] do_syscall_64+0xc9/0x1c0 [ 131.703255][ T9739] ? clear_bhb_loop+0x55/0xb0 [ 131.707986][ T9739] ? clear_bhb_loop+0x55/0xb0 [ 131.712685][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.718660][ T9739] RIP: 0033:0x7f79981d6b99 [ 131.723141][ T9739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.742752][ T9739] RSP: 002b:00007f7997458048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 131.751167][ T9739] RAX: ffffffffffffffda RBX: 00007f7998364f60 RCX: 00007f79981d6b99 [ 131.759146][ T9739] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 131.767157][ T9739] RBP: 00007f79974580a0 R08: 0000000020000240 R09: 000000000000001c [ 131.775157][ T9739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.783160][ T9739] R13: 000000000000000b R14: 00007f7998364f60 R15: 00007ffe7dc70248 [ 131.791145][ T9739] [ 131.843585][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 131.921028][ T9753] loop1: detected capacity change from 0 to 2048 [ 131.987191][ T9753] loop1: p1 < > p4 [ 131.992703][ T9753] loop1: p4 size 8388608 extends beyond EOD, truncated [ 132.018787][ T9753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1884'. [ 132.709971][ T9784] loop3: detected capacity change from 0 to 512 [ 132.737735][ T9784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.750314][ T9784] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.787896][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.792538][ T9791] loop1: detected capacity change from 0 to 512 [ 132.806969][ T9791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.819539][ T9791] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.857049][ T9791] 9pnet_fd: Insufficient options for proto=fd [ 132.952123][ T9811] loop4: detected capacity change from 0 to 1024 [ 133.235231][ T9831] loop0: detected capacity change from 0 to 512 [ 133.246993][ T9831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.259502][ T9831] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.270986][ T9831] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.1909: Failed to acquire dquot type 0 [ 133.314096][ T8555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.391133][ T9839] loop2: detected capacity change from 0 to 512 [ 133.397749][ T9839] ext4: Bad value for 'init_itable' [ 133.430847][ T9839] loop2: detected capacity change from 0 to 128 [ 133.629183][ T9467] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.761541][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.769136][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.776610][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.783991][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.791476][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.798883][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.806318][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.813757][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821444][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821471][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821517][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821557][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821577][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821596][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821615][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821691][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821712][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821734][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821821][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821845][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.821945][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822043][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822062][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822081][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822103][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822126][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822148][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822180][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822202][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822225][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822248][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822268][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822287][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822306][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822329][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822360][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822435][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.822456][ T3158] hid-generic 0000:C9C2:0000.0001: unknown main item tag 0x0 [ 133.838083][ T3158] hid-generic 0000:C9C2:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 133.938146][ T9885] loop2: detected capacity change from 0 to 512 [ 134.091416][ T9885] EXT4-fs: Ignoring removed orlov option [ 134.097331][ T9885] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.106293][ T9885] EXT4-fs (loop2): can't mount with commit=7, fs mounted w/o journal [ 134.184958][ T9903] loop4: detected capacity change from 0 to 2048 [ 134.190453][ T9905] loop2: detected capacity change from 0 to 512 [ 134.199352][ T9905] ext4: Bad value for 'init_itable' [ 134.205998][ T9903] loop4: p1 < > p4 [ 134.210369][ T9903] loop4: p4 size 8388608 extends beyond EOD, truncated [ 134.238981][ T9905] loop2: detected capacity change from 0 to 128 [ 134.431005][ T9910] loop3: detected capacity change from 0 to 8192 [ 134.475971][ T9910] loop3: p4 [ 134.479309][ T9910] loop3: p4 size 16776960 extends beyond EOD, truncated [ 134.538059][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 134.538072][ T29] audit: type=1400 audit(1719988265.522:2592): avc: denied { read append } for pid=9911 comm="syz.3.1939" name="ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.569503][ T29] audit: type=1400 audit(1719988265.522:2593): avc: denied { open } for pid=9911 comm="syz.3.1939" path="/dev/ptp0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.619088][ T9922] loop0: detected capacity change from 0 to 128 [ 134.655170][ T9924] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.675605][ T29] audit: type=1400 audit(1719988265.632:2594): avc: denied { ioctl } for pid=9923 comm="syz.3.1944" path="socket:[32712]" dev="sockfs" ino=32712 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.701585][ T29] audit: type=1400 audit(1719988265.632:2595): avc: denied { setopt } for pid=9923 comm="syz.3.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.732124][ T9930] program syz.2.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.743385][ T29] audit: type=1326 audit(1719988265.732:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.3.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f79981d6b99 code=0x0 [ 134.811939][ T9943] program syz.2.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.837007][ T29] audit: type=1400 audit(1719988265.812:2597): avc: denied { ioctl } for pid=9921 comm="syz.0.1943" path="socket:[32751]" dev="sockfs" ino=32751 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.889475][ T29] audit: type=1326 audit(1719988265.872:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374c96b99 code=0x7ffc0000 [ 134.913239][ T29] audit: type=1326 audit(1719988265.872:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374c96b99 code=0x7ffc0000 [ 134.936703][ T29] audit: type=1326 audit(1719988265.872:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f5374c96b99 code=0x7ffc0000 [ 134.960156][ T29] audit: type=1326 audit(1719988265.872:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374c96b99 code=0x7ffc0000 [ 135.160717][ T9978] loop1: detected capacity change from 0 to 512 [ 135.260191][ T9999] xt_nfacct: accounting object `syz1' does not exists [ 135.276572][T10001] __nla_validate_parse: 3 callbacks suppressed [ 135.276588][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'. [ 135.355889][T10008] loop3: detected capacity change from 0 to 128 [ 135.407336][T10011] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 135.417576][T10013] loop1: detected capacity change from 0 to 128 [ 135.492207][T10029] loop4: detected capacity change from 0 to 164 [ 135.499353][T10029] Unable to read rock-ridge attributes [ 135.523269][T10041] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 135.553901][T10048] loop1: detected capacity change from 0 to 2048 [ 135.574610][T10048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.601337][T10051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10051 comm=syz.4.1982 [ 135.643008][ T9467] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 255(4), depth 0(0) [ 135.661457][ T9467] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 255(4), depth 0(0) [ 135.738466][T10067] loop0: detected capacity change from 0 to 512 [ 135.745370][T10067] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 135.765426][T10069] netlink: 'syz.4.1989': attribute type 4 has an invalid length. [ 135.792775][T10069] netlink: 'syz.4.1989': attribute type 4 has an invalid length. [ 135.808906][T10076] loop0: detected capacity change from 0 to 512 [ 135.822843][T10076] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 135.832542][T10076] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 135.842380][T10076] System zones: 0-2, 18-18, 34-35 [ 135.848217][T10076] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.863328][T10086] loop2: detected capacity change from 0 to 1024 [ 135.877283][T10086] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 135.885479][T10055] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.898764][ T8555] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 135.912802][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 135.933250][ T1215] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.950574][T10094] loop4: detected capacity change from 0 to 128 [ 135.990094][ T1215] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.015907][T10105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10105 comm=syz.0.1998 [ 136.041679][ T1215] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.092486][T10115] kernel profiling enabled (shift: 0) [ 136.101659][ T1215] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.190070][ T1215] bridge_slave_1: left allmulticast mode [ 136.196376][ T1215] bridge_slave_1: left promiscuous mode [ 136.202029][ T1215] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.225392][ T1215] bridge_slave_0: left allmulticast mode [ 136.231715][ T1215] bridge_slave_0: left promiscuous mode [ 136.237445][ T1215] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.263261][T10127] loop4: detected capacity change from 0 to 512 [ 136.270666][T10127] ext4: Bad value for 'init_itable' [ 136.318676][T10127] loop4: detected capacity change from 0 to 128 [ 136.338402][ T1215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.348832][ T1215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.359142][ T1215] bond0 (unregistering): Released all slaves [ 136.383886][T10096] chnl_net:caif_netlink_parms(): no params data found [ 136.417522][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.424778][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.432249][T10096] bridge_slave_0: entered allmulticast mode [ 136.440693][T10096] bridge_slave_0: entered promiscuous mode [ 136.447939][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.455256][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.463170][T10096] bridge_slave_1: entered allmulticast mode [ 136.470174][T10096] bridge_slave_1: entered promiscuous mode [ 136.478827][ T1215] hsr_slave_0: left promiscuous mode [ 136.484612][ T1215] hsr_slave_1: left promiscuous mode [ 136.491057][ T1215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.498580][ T1215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.506904][ T1215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.514331][ T1215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.523279][ T1215] veth1_macvtap: left promiscuous mode [ 136.528820][ T1215] veth0_macvtap: left promiscuous mode [ 136.534493][ T1215] veth1_vlan: left promiscuous mode [ 136.539933][ T1215] veth0_vlan: left promiscuous mode [ 136.617608][ T1215] team0 (unregistering): Port device team_slave_1 removed [ 136.628405][ T1215] team0 (unregistering): Port device team_slave_0 removed [ 136.672910][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.684185][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.703254][T10096] team0: Port device team_slave_0 added [ 136.710563][T10096] team0: Port device team_slave_1 added [ 136.727709][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.734896][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.761689][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.773186][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.780182][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.806248][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.835132][T10096] hsr_slave_0: entered promiscuous mode [ 136.842701][T10096] hsr_slave_1: entered promiscuous mode [ 136.849564][T10096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.857570][T10096] Cannot create hsr debugfs directory [ 136.991790][T10179] loop0: detected capacity change from 0 to 1024 [ 137.010013][T10179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.012279][T10182] loop4: detected capacity change from 0 to 512 [ 137.030354][ T8555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.037156][T10182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.052004][T10182] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.064473][T10182] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz.4.2020: Failed to acquire dquot type 0 [ 137.100242][ T8783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.104904][T10187] loop0: detected capacity change from 0 to 512 [ 137.117806][T10187] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.2021: bad orphan inode 1 [ 137.128717][T10187] EXT4-fs (loop0): Remounting filesystem read-only [ 137.136303][T10187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.148418][T10187] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 137.155238][T10187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.171781][T10190] loop4: detected capacity change from 0 to 128 [ 137.180654][T10096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.191363][T10096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.191836][T10187] loop0: detected capacity change from 0 to 512 [ 137.205182][T10187] EXT4-fs: quotafile must be on filesystem root [ 137.206635][T10096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.221635][T10096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.263037][T10198] netlink: 'syz.0.2025': attribute type 4 has an invalid length. [ 137.269877][T10204] loop4: detected capacity change from 0 to 512 [ 137.298375][T10204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.311348][T10204] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.319519][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.329893][T10210] FAULT_INJECTION: forcing a failure. [ 137.329893][T10210] name failslab, interval 1, probability 0, space 0, times 0 [ 137.342645][T10210] CPU: 1 PID: 10210 Comm: syz.2.2029 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 137.352783][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 137.362846][T10210] Call Trace: [ 137.366186][T10210] [ 137.369098][T10210] dump_stack_lvl+0xf2/0x150 [ 137.373751][T10210] dump_stack+0x15/0x20 [ 137.377892][T10210] should_fail_ex+0x229/0x230 [ 137.382623][T10210] ? kvmalloc_node_noprof+0x72/0x170 [ 137.387929][T10210] __should_failslab+0x92/0xa0 [ 137.392716][T10210] should_failslab+0x9/0x20 [ 137.397222][T10210] __kmalloc_node_noprof+0xa8/0x380 [ 137.402418][T10210] kvmalloc_node_noprof+0x72/0x170 [ 137.407522][T10210] alloc_netdev_mqs+0x99/0x8b0 [ 137.412274][T10210] ? __pfx_macvlan_setup+0x10/0x10 [ 137.417378][T10210] rtnl_create_link+0x233/0x680 [ 137.422228][T10210] rtnl_newlink+0xe10/0x1690 [ 137.426829][T10210] ? mutex_spin_on_owner+0xc6/0x170 [ 137.432086][T10210] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 137.438322][T10210] ? _raw_spin_unlock+0x26/0x50 [ 137.443183][T10210] ? __mutex_lock+0x221/0x8e0 [ 137.448054][T10210] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.453078][T10210] rtnetlink_rcv_msg+0x85e/0x910 [ 137.458125][T10210] ? memcg_list_lru_alloc+0xd2/0x740 [ 137.463522][T10210] ? mod_objcg_state+0x2e2/0x4e0 [ 137.468472][T10210] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 137.473961][T10210] ? xas_load+0x3ae/0x3d0 [ 137.478285][T10210] ? kmem_cache_free+0xd8/0x280 [ 137.483128][T10210] ? nlmon_xmit+0x51/0x60 [ 137.487454][T10210] ? __kfree_skb+0x102/0x150 [ 137.492100][T10210] ? consume_skb+0x57/0x180 [ 137.496594][T10210] ? nlmon_xmit+0x51/0x60 [ 137.500932][T10210] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 137.506206][T10210] ? __dev_queue_xmit+0xb21/0x1e50 [ 137.511442][T10210] ? ref_tracker_free+0x3a5/0x410 [ 137.516482][T10210] netlink_rcv_skb+0x12c/0x230 [ 137.521379][T10210] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.526882][T10210] rtnetlink_rcv+0x1c/0x30 [ 137.531342][T10210] netlink_unicast+0x58d/0x660 [ 137.536170][T10210] netlink_sendmsg+0x5ca/0x6e0 [ 137.540943][T10210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.546280][T10210] __sock_sendmsg+0x140/0x180 [ 137.550960][T10210] ____sys_sendmsg+0x312/0x410 [ 137.555719][T10210] __sys_sendmsg+0x1e9/0x280 [ 137.560308][T10210] __x64_sys_sendmsg+0x46/0x50 [ 137.565062][T10210] x64_sys_call+0xb25/0x2d70 [ 137.569647][T10210] do_syscall_64+0xc9/0x1c0 [ 137.574259][T10210] ? clear_bhb_loop+0x55/0xb0 [ 137.578994][T10210] ? clear_bhb_loop+0x55/0xb0 [ 137.583684][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.589580][T10210] RIP: 0033:0x7f5374c96b99 [ 137.593984][T10210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.613582][T10210] RSP: 002b:00007f5373f18048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.622033][T10210] RAX: ffffffffffffffda RBX: 00007f5374e24f60 RCX: 00007f5374c96b99 [ 137.630038][T10210] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 137.637999][T10210] RBP: 00007f5373f180a0 R08: 0000000000000000 R09: 0000000000000000 [ 137.646049][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.654066][T10210] R13: 000000000000000b R14: 00007f5374e24f60 R15: 00007ffcb4380d58 [ 137.662178][T10210] [ 137.679234][T10096] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.703439][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.710606][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.729233][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.736386][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.761372][T10096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.799311][ T8783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.830336][T10231] netlink: 'syz.0.2036': attribute type 4 has an invalid length. [ 137.831761][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.838209][T10231] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2036'. [ 137.922277][T10096] veth0_vlan: entered promiscuous mode [ 137.930343][T10096] veth1_vlan: entered promiscuous mode [ 137.946796][T10096] veth0_macvtap: entered promiscuous mode [ 137.953903][T10096] veth1_macvtap: entered promiscuous mode [ 137.964856][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.975468][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.985426][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.995941][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.005851][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.016343][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.026190][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.036902][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.046731][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.057238][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.067201][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.077663][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.088540][T10096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.100057][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.110660][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.120636][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.131128][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.141130][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.151570][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.161418][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.171860][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.181772][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.192230][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.202154][T10096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.212630][T10096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.223715][T10096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.232557][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 138.241055][T10096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.250359][T10096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.259134][T10096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.268719][T10096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.299368][T10253] loop4: detected capacity change from 0 to 512 [ 138.329276][T10253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.342839][T10253] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.393773][T10253] netlink: 'syz.4.2042': attribute type 10 has an invalid length. [ 138.402263][T10253] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 138.410050][T10253] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 138.417208][T10253] bridge0: port 3(netdevsim1) entered disabled state [ 138.439211][ T8783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.511072][T10282] loop4: detected capacity change from 0 to 512 [ 138.519690][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 138.526573][T10282] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.2050: corrupted in-inode xattr: invalid ea_ino [ 138.542877][T10282] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2050: couldn't read orphan inode 12 (err -117) [ 138.558119][T10282] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.593458][ T8783] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 138.618830][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 138.640440][T10288] macvlan2: entered allmulticast mode [ 138.651358][T10288] team_slave_0: entered promiscuous mode [ 138.657049][T10288] team_slave_1: entered promiscuous mode [ 138.662810][T10288] team0: entered allmulticast mode [ 138.668054][T10288] team_slave_0: entered allmulticast mode [ 138.671268][T10292] loop0: detected capacity change from 0 to 512 [ 138.673758][T10288] team_slave_1: entered allmulticast mode [ 138.690889][T10295] loop4: detected capacity change from 0 to 1024 [ 138.700871][T10288] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.711123][T10292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.730344][T10295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.755304][T10288] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 138.779336][T10292] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.796803][T10293] bond0: entered promiscuous mode [ 138.801929][T10293] bond_slave_0: entered promiscuous mode [ 138.808291][T10293] bond_slave_1: entered promiscuous mode [ 138.814175][T10293] macvlan2: entered promiscuous mode [ 138.819538][T10293] team0: entered promiscuous mode [ 138.830193][T10300] loop2: detected capacity change from 0 to 512 [ 138.839604][ T8783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.870480][T10300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.888103][T10300] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.942654][ T8555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.002376][T10300] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 139.022590][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 139.045407][ T8393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.145054][T10341] program syz.2.2069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.219175][T10358] 9pnet_fd: Insufficient options for proto=fd [ 139.230802][T10361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2076'. [ 139.278487][T10370] loop2: detected capacity change from 0 to 512 [ 139.288880][T10370] program syz.2.2080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.298008][T10373] loop4: detected capacity change from 0 to 512 [ 139.466234][T10375] loop2: detected capacity change from 0 to 736 [ 139.472781][T10375] iso9660: Unknown parameter ' ' [ 139.528981][T10375] tmpfs: Bad value for 'size' [ 139.620005][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 139.620059][ T29] audit: type=1400 audit(1719988270.602:2791): avc: denied { map } for pid=10395 comm="syz.2.2090" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.650803][ T29] audit: type=1400 audit(1719988270.602:2792): avc: denied { execute } for pid=10395 comm="syz.2.2090" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.749986][T10405] team_slave_0: entered promiscuous mode [ 139.755736][T10405] team_slave_1: entered promiscuous mode [ 139.762019][T10405] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 139.771170][T10405] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 139.784422][T10405] bond0: entered promiscuous mode [ 139.789496][T10405] bond_slave_0: entered promiscuous mode [ 139.796274][T10405] bond_slave_1: entered promiscuous mode [ 139.802010][T10405] macvlan3: entered promiscuous mode [ 139.807403][T10405] team0: entered promiscuous mode [ 139.824558][T10405] loop2: detected capacity change from 0 to 1024 [ 139.831806][T10405] EXT4-fs: Ignoring removed orlov option [ 139.837558][T10405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.847337][T10405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.860963][ T29] audit: type=1400 audit(1719988270.842:2793): avc: denied { listen } for pid=10404 comm="syz.2.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 139.881747][ T29] audit: type=1400 audit(1719988270.842:2794): avc: denied { ioctl } for pid=10404 comm="syz.2.2094" path="socket:[35288]" dev="sockfs" ino=35288 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 139.906981][ T29] audit: type=1400 audit(1719988270.842:2795): avc: denied { setattr } for pid=10404 comm="syz.2.2094" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.930499][ T8393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.979980][ T29] audit: type=1400 audit(1719988270.962:2796): avc: denied { map } for pid=10414 comm="syz.2.2095" path="socket:[35304]" dev="sockfs" ino=35304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.003414][ T29] audit: type=1400 audit(1719988270.962:2797): avc: denied { read } for pid=10414 comm="syz.2.2095" path="socket:[35304]" dev="sockfs" ino=35304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.027681][T10419] 9pnet_fd: Insufficient options for proto=fd [ 140.034467][ T29] audit: type=1400 audit(1719988270.962:2798): avc: denied { wake_alarm } for pid=10414 comm="syz.2.2095" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.080454][T10427] loop1: detected capacity change from 0 to 1024 [ 140.088820][T10427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.102437][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'. [ 140.118354][T10427] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 140.126980][T10427] System zones: 0-1, 3-12 [ 140.132006][T10427] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.140286][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 140.154856][T10096] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 140.166966][T10441] loop0: detected capacity change from 0 to 512 [ 140.177190][T10441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.191828][T10441] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.203637][T10441] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 140.213807][T10441] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 140.213825][T10441] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.2109: Failed to acquire dquot type 0 [ 140.230576][T10452] loop2: detected capacity change from 0 to 4096 [ 140.253942][T10452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.279049][ T8555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.341552][T10455] 9pnet_fd: Insufficient options for proto=fd [ 140.359810][T10457] loop0: detected capacity change from 0 to 1024 [ 140.366920][T10457] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.380378][T10457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.425464][T10471] usb usb1: usbfs: process 10471 (syz.1.2120) did not claim interface 0 before use [ 140.447179][T10473] loop1: detected capacity change from 0 to 512 [ 140.459883][T10473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.473140][T10473] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.473967][ T8555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.511247][T10096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.554410][T10481] 9pnet_fd: Insufficient options for proto=fd [ 140.568995][T10483] netlink: 15162 bytes leftover after parsing attributes in process `syz.0.2126'. [ 140.578746][T10483] program syz.0.2126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.583145][T10485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62736 sclass=netlink_route_socket pid=10485 comm=syz.1.2123 [ 140.613086][T10487] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.661098][T10500] loop1: detected capacity change from 0 to 512 [ 140.668960][T10500] ext2: Unknown parameter 'euid>00000000000000000000' [ 140.768930][T10513] loop0: detected capacity change from 0 to 128 [ 140.777564][T10513] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 140.787920][T10513] FAT-fs (loop0): FAT read failed (blocknr 255) [ 140.804483][T10519] loop1: detected capacity change from 0 to 512 [ 140.811420][T10519] ext2: Unknown parameter 'euid>00000000000000000000' [ 140.856704][T10519] FAULT_INJECTION: forcing a failure. [ 140.856704][T10519] name failslab, interval 1, probability 0, space 0, times 0 [ 140.869479][T10519] CPU: 1 PID: 10519 Comm: syz.1.2138 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 140.879631][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.889673][T10519] Call Trace: [ 140.892936][T10519] [ 140.895850][T10519] dump_stack_lvl+0xf2/0x150 [ 140.900433][T10519] dump_stack+0x15/0x20 [ 140.904587][T10519] should_fail_ex+0x229/0x230 [ 140.909319][T10519] ? __alloc_skb+0x10b/0x300 [ 140.913894][T10519] __should_failslab+0x92/0xa0 [ 140.918641][T10519] should_failslab+0x9/0x20 [ 140.923131][T10519] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 140.928977][T10519] __alloc_skb+0x10b/0x300 [ 140.933446][T10519] tipc_msg_build+0xc6/0x820 [ 140.938029][T10519] ? __rcu_read_unlock+0x4e/0x70 [ 140.943034][T10519] ? mntput_no_expire+0x70/0x3c0 [ 140.948112][T10519] __tipc_sendstream+0x672/0xb20 [ 140.953038][T10519] ? __pfx_woken_wake_function+0x10/0x10 [ 140.958742][T10519] ? __pfx_tipc_sendstream+0x10/0x10 [ 140.964017][T10519] tipc_sendstream+0x3e/0x60 [ 140.968636][T10519] __sock_sendmsg+0x140/0x180 [ 140.973422][T10519] sock_write_iter+0x164/0x1b0 [ 140.978183][T10519] vfs_write+0x78f/0x900 [ 140.982414][T10519] ? __pfx_sock_write_iter+0x10/0x10 [ 140.987689][T10519] ksys_write+0xeb/0x1b0 [ 140.991983][T10519] __x64_sys_write+0x42/0x50 [ 140.996566][T10519] x64_sys_call+0x27ef/0x2d70 [ 141.001237][T10519] do_syscall_64+0xc9/0x1c0 [ 141.005946][T10519] ? clear_bhb_loop+0x55/0xb0 [ 141.010686][T10519] ? clear_bhb_loop+0x55/0xb0 [ 141.015348][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.021251][T10519] RIP: 0033:0x7f29c11e8b99 [ 141.025707][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.045364][T10519] RSP: 002b:00007f29c046a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.053837][T10519] RAX: ffffffffffffffda RBX: 00007f29c1376f60 RCX: 00007f29c11e8b99 [ 141.061818][T10519] RDX: 000000002000011a RSI: 0000000020000080 RDI: 0000000000000005 [ 141.069887][T10519] RBP: 00007f29c046a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.077894][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.085930][T10519] R13: 000000000000000b R14: 00007f29c1376f60 R15: 00007ffc0540b0d8 [ 141.094025][T10519] [ 141.099670][ T8393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.238928][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 141.263043][T10550] loop1: detected capacity change from 0 to 2048 [ 141.311312][T10550] Alternate GPT is invalid, using primary GPT. [ 141.314977][T10552] loop2: detected capacity change from 0 to 1024 [ 141.317870][T10550] loop1: p2 p3 p7 [ 141.325311][T10552] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.339202][T10552] JBD2: no valid journal superblock found [ 141.345051][T10552] EXT4-fs (loop2): Could not load journal inode [ 141.439934][T10550] loop1: detected capacity change from 0 to 1024 [ 141.446796][T10550] EXT4-fs: Ignoring removed oldalloc option [ 141.452800][T10550] ext4: Unknown parameter 'subj_role' [ 141.522008][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 141.531942][T10560] loop1: detected capacity change from 0 to 128 [ 141.663023][T10569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.059754][T10577] loop0: detected capacity change from 0 to 512 [ 142.068207][T10577] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2155: attempt to clear invalid blocks 1 len 1 [ 142.081572][T10577] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2155: bg 0: block 343: padding at end of block bitmap is not set [ 142.096196][T10577] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 142.105250][T10577] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2155: invalid indirect mapped block 1819239214 (level 0) [ 142.120604][T10577] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2155: invalid indirect mapped block 1819239214 (level 1) [ 142.135007][T10577] EXT4-fs (loop0): 1 truncate cleaned up [ 142.141330][T10577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.154395][T10577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.609534][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 142.619943][T10596] loop0: detected capacity change from 0 to 128 [ 142.704974][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 142.732165][T10609] loop0: detected capacity change from 0 to 512 [ 142.738782][T10609] EXT4-fs: Ignoring removed nobh option [ 142.747109][T10609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.760314][T10609] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.777880][ T8555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.077500][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 143.087472][T10615] loop0: detected capacity change from 0 to 128 [ 143.175804][T10623] loop0: detected capacity change from 0 to 512 [ 143.182439][T10623] ext4: Bad value for 'init_itable' [ 143.218450][T10623] loop0: detected capacity change from 0 to 128 [ 143.540933][T10625] loop2: detected capacity change from 0 to 512 [ 143.549194][T10625] EXT4-fs (loop2): 1 truncate cleaned up [ 143.555157][T10625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.589284][ T8393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.660609][T10641] loop0: detected capacity change from 0 to 1024 [ 143.667275][T10641] journal_path: not usable as path [ 143.672567][T10641] EXT4-fs: error: could not find journal device path [ 143.955730][T10661] loop0: detected capacity change from 0 to 1024 [ 143.962208][T10661] EXT4-fs: quotafile must be on filesystem root [ 144.117786][T10569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.173139][T10569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.228018][T10569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.281374][T10569] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.293185][T10569] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.305002][T10569] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.316676][T10569] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.339632][T10697] loop1: detected capacity change from 0 to 256 [ 144.347485][T10697] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.408540][T10702] loop2: detected capacity change from 0 to 1024 [ 144.427457][T10702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.477990][ T8393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.632864][T10741] loop2: detected capacity change from 0 to 128 [ 144.641745][T10741] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.649073][T10741] vhci_hcd: invalid port number 219 [ 144.654270][T10741] vhci_hcd: default hub control req: 0000 v6ab1 i00db l1556 [ 144.721514][T10752] loop0: detected capacity change from 0 to 1024 [ 144.736933][T10752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.749113][T10752] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.763068][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 144.763081][ T29] audit: type=1400 audit(1719988275.742:2902): avc: denied { ioctl } for pid=10751 comm="syz.0.2213" path="socket:[36704]" dev="sockfs" ino=36704 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.799308][ T29] audit: type=1400 audit(1719988275.782:2903): avc: denied { accept } for pid=10751 comm="syz.0.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.824197][ T8555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.353773][ T29] audit: type=1326 audit(1719988276.332:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7fc00000 [ 145.377379][ T29] audit: type=1326 audit(1719988276.332:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29c11e8b99 code=0x7fc00000 [ 145.400889][ T29] audit: type=1326 audit(1719988276.332:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7fc00000 [ 145.424565][ T29] audit: type=1326 audit(1719988276.332:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7fc00000 [ 145.448242][ T29] audit: type=1326 audit(1719988276.332:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7fc00000 [ 145.471916][ T29] audit: type=1326 audit(1719988276.332:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7fc00000 [ 145.495679][ T29] audit: type=1326 audit(1719988276.332:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7fc00000 [ 145.519172][ T29] audit: type=1326 audit(1719988276.332:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10725 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7fc00000 [ 145.674358][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2221'. [ 145.722317][T10779] 9pnet_virtio: no channels available for device [ 145.722320][T10782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.725837][ T3163] IPVS: starting estimator thread 0... [ 145.766478][T10797] No such timeout policy "syz1" [ 145.772657][T10797] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.823123][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2230'. [ 145.833315][T10806] loop2: detected capacity change from 0 to 128 [ 145.845566][T10790] IPVS: using max 2832 ests per chain, 141600 per kthread [ 145.908925][T10780] chnl_net:caif_netlink_parms(): no params data found [ 145.927493][T10814] loop2: detected capacity change from 0 to 512 [ 145.934135][T10814] ext4: Bad value for 'init_itable' [ 145.950239][T10780] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.957370][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.964581][T10780] bridge_slave_0: entered allmulticast mode [ 145.972102][T10780] bridge_slave_0: entered promiscuous mode [ 145.979653][T10780] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.980833][T10814] loop2: detected capacity change from 0 to 128 [ 145.987369][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.001631][T10780] bridge_slave_1: entered allmulticast mode [ 146.008204][T10780] bridge_slave_1: entered promiscuous mode [ 146.024459][T10780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.035771][T10780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.054194][T10780] team0: Port device team_slave_0 added [ 146.061160][T10780] team0: Port device team_slave_1 added [ 146.076012][T10780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.082998][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.109320][T10780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.120590][T10780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.127681][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.154057][T10780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.179063][T10780] hsr_slave_0: entered promiscuous mode [ 146.185147][T10780] hsr_slave_1: entered promiscuous mode [ 146.191118][T10780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.198784][T10780] Cannot create hsr debugfs directory [ 146.256430][T10780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.299232][T10780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.361415][T10780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.414496][T10780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.442384][T10826] 9pnet_virtio: no channels available for device [ 146.459545][T10830] loop2: detected capacity change from 0 to 512 [ 146.478304][T10830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.479398][T10780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.490951][T10830] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.510758][T10780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.521072][T10780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.529001][ T8393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.530250][T10780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.575263][T10780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.581820][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 146.588177][T10780] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.600508][T10837] loop2: detected capacity change from 0 to 128 [ 146.601734][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.613854][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.628135][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.635310][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.699213][T10847] loop2: detected capacity change from 0 to 512 [ 146.706083][T10847] ext4: Bad value for 'init_itable' [ 146.706541][T10780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.739116][T10847] loop2: detected capacity change from 0 to 128 [ 146.784949][T10780] veth0_vlan: entered promiscuous mode [ 146.793290][T10780] veth1_vlan: entered promiscuous mode [ 146.809611][T10780] veth0_macvtap: entered promiscuous mode [ 146.817512][T10780] veth1_macvtap: entered promiscuous mode [ 146.829479][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.840505][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.850402][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.861183][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.871547][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.882065][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.891881][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.902728][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.912534][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.923000][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.933205][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.943700][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.953520][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.964291][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.976706][T10780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.989396][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.999989][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.009886][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.015570][ C0] Adjusting tsc more than 11% (8578369 vs 8463990) [ 147.020896][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.036631][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.047674][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.057500][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.067952][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.078335][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.088956][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.098778][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.109820][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.119644][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.130125][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.142244][T10780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.153480][T10780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.162301][T10780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.171106][T10780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.179923][T10780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.257606][T10869] loop3: detected capacity change from 0 to 1024 [ 147.263978][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 147.265715][T10869] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.274051][T10872] loop1: detected capacity change from 0 to 128 [ 147.285820][T10869] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.298096][T10869] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.305101][T10869] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm syz.3.2248: Invalid inode table block 0 in block_group 0 [ 147.318754][T10869] EXT4-fs (loop3): Remounting filesystem read-only [ 147.325421][T10869] EXT4-fs (loop3): 1 truncate cleaned up [ 147.332171][T10869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.346887][T10869] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 147.354137][T10869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.370646][T10880] loop1: detected capacity change from 0 to 1024 [ 147.382001][T10880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.399415][T10096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.415794][T10869] loop3: detected capacity change from 0 to 164 [ 147.424090][T10869] syz.3.2248: attempt to access beyond end of device [ 147.424090][T10869] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 147.438152][T10869] syz.3.2248: attempt to access beyond end of device [ 147.438152][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.452414][T10869] syz.3.2248: attempt to access beyond end of device [ 147.452414][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.466105][T10869] syz.3.2248: attempt to access beyond end of device [ 147.466105][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.480311][T10869] syz.3.2248: attempt to access beyond end of device [ 147.480311][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.493937][T10869] syz.3.2248: attempt to access beyond end of device [ 147.493937][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.507838][T10869] syz.3.2248: attempt to access beyond end of device [ 147.507838][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.522153][T10869] syz.3.2248: attempt to access beyond end of device [ 147.522153][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.535990][T10869] syz.3.2248: attempt to access beyond end of device [ 147.535990][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.552597][T10869] syz.3.2248: attempt to access beyond end of device [ 147.552597][T10869] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 148.077098][T10924] netlink: 'syz.3.2271': attribute type 13 has an invalid length. [ 148.085450][T10924] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2271'. [ 148.105445][T10924] erspan0: refused to change device tx_queue_len [ 148.112448][T10924] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 148.190274][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2277'. [ 148.202717][T10939] loop1: detected capacity change from 0 to 512 [ 148.221716][T10941] loop3: detected capacity change from 0 to 1024 [ 148.229536][T10939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.231311][T10941] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.242095][T10939] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.264400][T10096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.265865][T10941] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 148.283529][T10941] EXT4-fs (loop3): orphan cleanup on readonly fs [ 148.290427][T10941] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm syz.3.2278: Invalid inode table block 0 in block_group 0 [ 148.304945][T10941] EXT4-fs (loop3): Remounting filesystem read-only [ 148.315361][T10941] EXT4-fs (loop3): 1 truncate cleaned up [ 148.323631][T10941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.336857][T10941] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 148.391687][T10941] loop3: detected capacity change from 0 to 164 [ 148.589695][T10962] pim6reg: entered allmulticast mode [ 148.655424][T10969] loop0: detected capacity change from 0 to 1764 [ 148.713967][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 149.060855][T10984] loop0: detected capacity change from 0 to 1024 [ 149.067590][T10984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.113725][T10992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2295'. [ 149.199333][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 149.248120][T11006] loop2: detected capacity change from 0 to 1764 [ 149.254971][T11006] iso9660: Unknown parameter ' heck' [ 149.319282][T11015] loop1: detected capacity change from 0 to 764 [ 149.327728][T11015] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 149.337290][T11015] Symlink component flag not implemented [ 149.342985][T11015] Symlink component flag not implemented [ 149.349081][T11015] Symlink component flag not implemented (128) [ 149.355292][T11015] Symlink component flag not implemented (122) [ 149.495289][T11028] dccp_invalid_packet: P.Data Offset(0) too small [ 149.621559][T11018] chnl_net:caif_netlink_parms(): no params data found [ 149.635652][ T3112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.650750][ T8393] bridge0: port 3(syz_tun) entered disabled state [ 149.661943][ T8393] syz_tun (unregistering): left allmulticast mode [ 149.668489][ T8393] syz_tun (unregistering): left promiscuous mode [ 149.675057][ T8393] bridge0: port 3(syz_tun) entered disabled state [ 149.695089][ T3112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.726407][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.733628][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.742055][T11018] bridge_slave_0: entered allmulticast mode [ 149.749484][T11018] bridge_slave_0: entered promiscuous mode [ 149.757833][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.764999][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.774455][T11018] bridge_slave_1: entered allmulticast mode [ 149.780982][T11018] bridge_slave_1: entered promiscuous mode [ 149.790305][ T3112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.818236][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.830678][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.853620][T11018] team0: Port device team_slave_0 added [ 149.863910][ T3112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.878258][T11018] team0: Port device team_slave_1 added [ 149.898979][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.906029][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.932182][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.944796][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.951753][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.977667][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.015765][T11018] hsr_slave_0: entered promiscuous mode [ 150.022322][T11018] hsr_slave_1: entered promiscuous mode [ 150.029337][T11018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.037099][T11018] Cannot create hsr debugfs directory [ 150.060828][ T3112] bridge_slave_1: left allmulticast mode [ 150.066581][ T3112] bridge_slave_1: left promiscuous mode [ 150.072339][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.087917][ T3112] bridge_slave_0: left allmulticast mode [ 150.093625][ T3112] bridge_slave_0: left promiscuous mode [ 150.099315][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.183173][ T3112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.193950][ T3112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.203742][ T3112] bond0 (unregistering): Released all slaves [ 150.250494][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 150.250507][ T29] audit: type=1400 audit(1719988281.522:3004): avc: denied { read } for pid=11050 comm="syz.1.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 150.261037][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881128fd000: rx timeout, send abort [ 150.284378][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8881128fd000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.357885][ T3112] hsr_slave_0: left promiscuous mode [ 150.381004][ T3112] hsr_slave_1: left promiscuous mode [ 150.390322][ T3112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.397294][T11063] Cannot find del_set index 0 as target [ 150.397911][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.414142][ T3112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.421660][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.431498][ T3112] veth1_macvtap: left promiscuous mode [ 150.437020][ T3112] veth0_macvtap: left promiscuous mode [ 150.442648][ T3112] veth0_vlan: left promiscuous mode [ 150.502981][ T29] audit: type=1326 audit(1719988281.785:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.526627][ T29] audit: type=1326 audit(1719988281.785:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.556855][ T29] audit: type=1326 audit(1719988281.785:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.580404][ T29] audit: type=1326 audit(1719988281.785:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.603938][ T29] audit: type=1326 audit(1719988281.785:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.627543][ T29] audit: type=1326 audit(1719988281.785:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.651054][ T29] audit: type=1326 audit(1719988281.785:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.674721][ T29] audit: type=1326 audit(1719988281.785:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.698102][ T29] audit: type=1326 audit(1719988281.785:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x7ffc0000 [ 150.746879][ T3112] team0 (unregistering): Port device team_slave_1 removed [ 150.757138][ T3112] team0 (unregistering): Port device team_slave_0 removed [ 150.825351][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2323'. [ 150.836423][T11080] bridge0: entered promiscuous mode [ 150.874489][T11041] chnl_net:caif_netlink_parms(): no params data found [ 150.902400][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 150.935388][T11041] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.942620][T11041] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.950495][T11041] bridge_slave_0: entered allmulticast mode [ 150.957122][T11041] bridge_slave_0: entered promiscuous mode [ 150.964586][T11041] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.971699][T11041] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.979348][T11041] bridge_slave_1: entered allmulticast mode [ 150.986309][T11041] bridge_slave_1: entered promiscuous mode [ 151.005897][T11041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.019023][T11041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.047820][T11041] team0: Port device team_slave_0 added [ 151.054608][T11041] team0: Port device team_slave_1 added [ 151.071480][T11018] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.080845][T11018] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.091657][T11041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.098720][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.124623][T11041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.135950][T11041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.142895][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.168875][T11041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.180033][T11018] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.190518][T11018] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.226187][T11041] hsr_slave_0: entered promiscuous mode [ 151.232646][T11041] hsr_slave_1: entered promiscuous mode [ 151.238520][T11041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.246249][T11041] Cannot create hsr debugfs directory [ 151.302319][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 151.314219][T11018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.327730][ T3112] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.343792][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'. [ 151.344860][T11018] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.358203][T11115] loop0: detected capacity change from 0 to 128 [ 151.383489][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.390670][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.399786][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.406849][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.426617][T11018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.437089][T11018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.454547][ T3112] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.493402][ T3112] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.523342][T11018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.560765][ T3112] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.635344][ T3112] bridge_slave_1: left allmulticast mode [ 151.641282][ T3112] bridge_slave_1: left promiscuous mode [ 151.647250][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.657719][ T3112] bridge_slave_0: left allmulticast mode [ 151.663429][ T3112] bridge_slave_0: left promiscuous mode [ 151.669077][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.755118][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'. [ 151.765441][T11151] loop1: detected capacity change from 0 to 128 [ 151.793648][ T3112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.802673][ T3112] bond_slave_0: left promiscuous mode [ 151.809952][ T3112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.819462][ T3112] bond_slave_1: left promiscuous mode [ 151.827185][ T3112] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 151.837327][ T3112] macvlan3: left promiscuous mode [ 151.842503][ T3112] team0: left promiscuous mode [ 151.848557][ T3112] team_slave_0: left promiscuous mode [ 151.853974][ T3112] team_slave_1: left promiscuous mode [ 151.861412][ T3112] bond0 (unregistering): Released all slaves [ 151.870299][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 151.891895][T11018] veth0_vlan: entered promiscuous mode [ 151.904462][T11018] veth1_vlan: entered promiscuous mode [ 151.923636][T11018] veth0_macvtap: entered promiscuous mode [ 151.931469][T11018] veth1_macvtap: entered promiscuous mode [ 151.944537][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.955042][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.964942][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.975500][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.985295][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.995825][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.005666][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.016193][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.026187][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.036632][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.046482][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.056943][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.066776][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.077360][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.087487][ T3112] IPVS: stopping backup sync thread 9352 ... [ 152.095224][T11018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.105983][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.116467][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.126409][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.136854][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.147177][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.157652][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.167518][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.178025][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.187903][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.198389][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.208211][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.218652][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.228495][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.238937][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.251985][T11018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.268186][T11018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.276999][T11018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.285839][T11018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.294932][T11018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.311424][ T3112] hsr_slave_0: left promiscuous mode [ 152.317772][ T3112] hsr_slave_1: left promiscuous mode [ 152.323419][ T3112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.331161][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.339511][ T3112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.347047][ T3112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.357983][ T3112] veth1_macvtap: left promiscuous mode [ 152.363523][ T3112] veth1_vlan: left promiscuous mode [ 152.368872][ T3112] veth0_vlan: left promiscuous mode [ 152.430593][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 152.443036][T11174] loop0: detected capacity change from 0 to 128 [ 152.502045][ T3112] team0 (unregistering): Port device team_slave_1 removed [ 152.515069][ T3112] team0 (unregistering): Port device team_slave_0 removed [ 152.556490][T11176] loop0: detected capacity change from 0 to 8192 [ 152.597288][T11176] loop0: p1 p2 p4 [ 152.612550][T11176] loop0: p1 size 108922248 extends beyond EOD, truncated [ 152.624127][T11041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.639777][T11041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.650130][T11176] loop0: p2 start 861536256 is beyond EOD, truncated [ 152.656991][T11176] loop0: p4 start 4194304 is beyond EOD, truncated [ 152.674891][T11041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.687296][T11041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.707679][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 152.769593][T11041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.807135][T11041] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.818847][ T3146] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.825970][ T3146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.847819][T11041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.858343][T11041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.877342][ T3146] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.884455][ T3146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.058428][T11209] netlink: 'syz.4.2361': attribute type 10 has an invalid length. [ 153.066270][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2361'. [ 153.076583][T11209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.162399][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 153.175190][T11041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.272939][T11223] loop1: detected capacity change from 0 to 1024 [ 153.275820][T11041] veth0_vlan: entered promiscuous mode [ 153.291420][T11041] veth1_vlan: entered promiscuous mode [ 153.311853][T11041] veth0_macvtap: entered promiscuous mode [ 153.319298][T11041] veth1_macvtap: entered promiscuous mode [ 153.329822][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.340488][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.350410][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.360912][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.370748][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.381155][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.390966][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.401405][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.411227][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.421667][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.431533][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.442124][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.451934][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.462340][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.473248][T11041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.485629][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.496205][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.506671][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.517203][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.527084][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.537571][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.547449][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.557875][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.567683][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.578136][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.587946][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.598349][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.608248][T11041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.618676][T11041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.629405][T11041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.649568][T11041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.658435][T11041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.667178][T11041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.675900][T11041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.334824][T11304] can: request_module (can-proto-3) failed. [ 154.707347][T11351] loop4: detected capacity change from 0 to 512 [ 154.715923][T11351] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.2403: casefold flag without casefold feature [ 154.728946][T11351] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2403: couldn't read orphan inode 15 (err -117) [ 154.857066][T11357] loop3: detected capacity change from 0 to 512 [ 154.871961][T11357] EXT4-fs (loop3): orphan cleanup on readonly fs [ 154.872683][T11358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.879883][T11357] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 154.903268][T11357] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 154.911873][T11357] EXT4-fs (loop3): 1 truncate cleaned up [ 154.949695][T11366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=11366 comm=syz.4.2408 [ 154.985687][T11358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.027732][T11358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.092213][T11358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.138778][T11384] loop3: detected capacity change from 0 to 8192 [ 155.159850][T11358] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.170820][T11358] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.182086][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 155.182099][ T29] audit: type=1400 audit(1719988286.578:3182): avc: denied { mount } for pid=11383 comm="syz.3.2412" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 155.183676][T11358] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.190802][T11384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11384 comm=syz.3.2412 [ 155.214304][T11358] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.254321][ T29] audit: type=1400 audit(1719988286.658:3183): avc: denied { unmount } for pid=10780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 155.275390][ T29] audit: type=1400 audit(1719988286.678:3184): avc: denied { write } for pid=11397 comm="syz.1.2418" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.308183][T11401] loop1: detected capacity change from 0 to 128 [ 155.338658][T11405] loop3: detected capacity change from 0 to 512 [ 155.345396][T11405] ext4: Bad value for 'init_itable' [ 155.378734][T11405] loop3: detected capacity change from 0 to 128 [ 155.596738][ T29] audit: type=1400 audit(1719988286.998:3185): avc: denied { mount } for pid=11413 comm="syz.0.2423" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.618894][ T29] audit: type=1400 audit(1719988286.998:3186): avc: denied { read } for pid=11413 comm="syz.0.2423" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.639662][ T29] audit: type=1400 audit(1719988286.998:3187): avc: denied { read open } for pid=11413 comm="syz.0.2423" path="/233/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.667542][ T29] audit: type=1400 audit(1719988287.068:3188): avc: denied { unmount } for pid=8555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.736408][T11424] pim6reg1: entered promiscuous mode [ 155.741756][T11424] pim6reg1: entered allmulticast mode [ 155.846281][T11431] loop3: detected capacity change from 0 to 256 [ 155.941763][T11442] loop3: detected capacity change from 0 to 256 [ 155.948508][T11442] FAT-fs (loop3): Unrecognized mount option "showexe" or missing value [ 156.055540][T11454] __nla_validate_parse: 8 callbacks suppressed [ 156.055557][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 156.070646][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 156.079647][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 156.107336][T11456] loop4: detected capacity change from 0 to 512 [ 156.114799][T11456] ext4: Bad value for 'init_itable' [ 156.141364][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 156.152569][T11456] loop4: detected capacity change from 0 to 128 [ 156.164722][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 156.174914][T11460] loop3: detected capacity change from 0 to 128 [ 156.255514][T11462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2443'. [ 156.273335][T11465] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 156.300702][T11465] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 156.301004][ T29] audit: type=1400 audit(1719988287.698:3189): avc: denied { mac_admin } for pid=11464 comm="syz.3.2442" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.339784][ T29] audit: type=1400 audit(1719988287.708:3190): avc: denied { relabelto } for pid=11464 comm="syz.3.2442" name="file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/sbin/dhclient" [ 156.364842][ T29] audit: type=1400 audit(1719988287.708:3191): avc: denied { associate } for pid=11464 comm="syz.3.2442" name="file0" dev="tmpfs" ino=164 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/sbin/dhclient" [ 156.420376][T11482] loop3: detected capacity change from 0 to 512 [ 156.427732][T11482] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 156.428956][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'. [ 156.454861][T11482] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 156.474544][T11488] loop2: detected capacity change from 0 to 512 [ 156.481179][T11488] EXT4-fs: quotafile must be on filesystem root [ 156.506198][T11482] loop3: detected capacity change from 0 to 512 [ 156.521255][T11488] syzkaller0: entered allmulticast mode [ 156.531792][T11482] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.549616][T11506] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2453'. [ 156.570814][T11482] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.2450: corrupted inode contents [ 156.582921][T11482] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.2450: mark_inode_dirty error [ 156.596298][T11482] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.2450: corrupted inode contents [ 156.608911][T11482] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.2450: mark_inode_dirty error [ 156.628430][T11517] loop4: detected capacity change from 0 to 512 [ 156.635049][T11517] ext4: Bad value for 'init_itable' [ 156.676905][T11517] loop4: detected capacity change from 0 to 128 [ 157.086948][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 157.114313][T11531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2465'. [ 157.333611][T11547] FAULT_INJECTION: forcing a failure. [ 157.333611][T11547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.346744][T11547] CPU: 0 PID: 11547 Comm: syz.4.2472 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 157.356900][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.367023][T11547] Call Trace: [ 157.370287][T11547] [ 157.373235][T11547] dump_stack_lvl+0xf2/0x150 [ 157.377824][T11547] dump_stack+0x15/0x20 [ 157.381994][T11547] should_fail_ex+0x229/0x230 [ 157.386704][T11547] should_fail+0xb/0x10 [ 157.390853][T11547] should_fail_usercopy+0x1a/0x20 [ 157.396045][T11547] _copy_from_user+0x1e/0xd0 [ 157.400645][T11547] do_replace+0x7b/0x2d0 [ 157.404885][T11547] do_ebt_set_ctl+0x1bd/0xb80 [ 157.409569][T11547] ? _parse_integer_limit+0x167/0x180 [ 157.414933][T11547] ? _parse_integer+0x27/0x30 [ 157.419648][T11547] ? kstrtoull+0x110/0x140 [ 157.424098][T11547] ? tcp_release_cb+0xfe/0x380 [ 157.428999][T11547] ? _raw_spin_unlock_bh+0x36/0x40 [ 157.434102][T11547] ? release_sock+0x117/0x150 [ 157.438840][T11547] ? sockopt_release_sock+0x42/0x50 [ 157.444054][T11547] ? do_ip_setsockopt+0x1fcf/0x2340 [ 157.449337][T11547] nf_setsockopt+0x195/0x1b0 [ 157.453919][T11547] ip_setsockopt+0xea/0x100 [ 157.458415][T11547] tcp_setsockopt+0x93/0xb0 [ 157.462964][T11547] sock_common_setsockopt+0x64/0x80 [ 157.468160][T11547] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 157.474132][T11547] __sys_setsockopt+0x1d8/0x250 [ 157.479090][T11547] __x64_sys_setsockopt+0x66/0x80 [ 157.484192][T11547] x64_sys_call+0x1183/0x2d70 [ 157.488862][T11547] do_syscall_64+0xc9/0x1c0 [ 157.493468][T11547] ? clear_bhb_loop+0x55/0xb0 [ 157.498225][T11547] ? clear_bhb_loop+0x55/0xb0 [ 157.502938][T11547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.508873][T11547] RIP: 0033:0x7fb8d8c5cb99 [ 157.513277][T11547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.532930][T11547] RSP: 002b:00007fb8d7ede048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.541407][T11547] RAX: ffffffffffffffda RBX: 00007fb8d8deaf60 RCX: 00007fb8d8c5cb99 [ 157.549376][T11547] RDX: 0000000000000080 RSI: 0a00000000000000 RDI: 0000000000000003 [ 157.557410][T11547] RBP: 00007fb8d7ede0a0 R08: 0000000000000a08 R09: 0000000000000000 [ 157.565456][T11547] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 157.573420][T11547] R13: 000000000000000b R14: 00007fb8d8deaf60 R15: 00007fffe39a7438 [ 157.581444][T11547] [ 157.655420][T11560] loop2: detected capacity change from 0 to 512 [ 157.662226][T11560] ext4: Bad value for 'init_itable' [ 157.708089][T11560] loop2: detected capacity change from 0 to 128 [ 157.865776][T11590] FAULT_INJECTION: forcing a failure. [ 157.865776][T11590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.878894][T11590] CPU: 0 PID: 11590 Comm: syz.1.2491 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 157.889078][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.899157][T11590] Call Trace: [ 157.902422][T11590] [ 157.905366][T11590] dump_stack_lvl+0xf2/0x150 [ 157.909979][T11590] dump_stack+0x15/0x20 [ 157.914182][T11590] should_fail_ex+0x229/0x230 [ 157.918888][T11590] should_fail+0xb/0x10 [ 157.923131][T11590] should_fail_usercopy+0x1a/0x20 [ 157.928301][T11590] _copy_to_user+0x1e/0xa0 [ 157.932708][T11590] simple_read_from_buffer+0xa0/0x110 [ 157.938083][T11590] proc_fail_nth_read+0xfc/0x140 [ 157.943024][T11590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.948627][T11590] vfs_read+0x1a2/0x6e0 [ 157.952810][T11590] ? __rcu_read_unlock+0x4e/0x70 [ 157.957742][T11590] ? __fget_files+0x1da/0x210 [ 157.962423][T11590] ksys_read+0xeb/0x1b0 [ 157.966569][T11590] __x64_sys_read+0x42/0x50 [ 157.971139][T11590] x64_sys_call+0x27e5/0x2d70 [ 157.975806][T11590] do_syscall_64+0xc9/0x1c0 [ 157.980300][T11590] ? clear_bhb_loop+0x55/0xb0 [ 157.985522][T11590] ? clear_bhb_loop+0x55/0xb0 [ 157.990193][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.996081][T11590] RIP: 0033:0x7f29c11e767c [ 158.000491][T11590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 158.020171][T11590] RSP: 002b:00007f29c046a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.028652][T11590] RAX: ffffffffffffffda RBX: 00007f29c1376f60 RCX: 00007f29c11e767c [ 158.036749][T11590] RDX: 000000000000000f RSI: 00007f29c046a0b0 RDI: 0000000000000004 [ 158.044768][T11590] RBP: 00007f29c046a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.052755][T11590] R10: 0000000020001340 R11: 0000000000000246 R12: 0000000000000001 [ 158.060712][T11590] R13: 000000000000000b R14: 00007f29c1376f60 R15: 00007ffc0540b0d8 [ 158.068893][T11590] [ 158.097449][T11596] 9pnet_fd: Insufficient options for proto=fd [ 158.103927][T11596] 9pnet_fd: Insufficient options for proto=fd [ 158.140487][T11602] loop1: detected capacity change from 0 to 512 [ 158.239238][T11605] FAULT_INJECTION: forcing a failure. [ 158.239238][T11605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.252525][T11605] CPU: 0 PID: 11605 Comm: syz.3.2494 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 158.262757][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 158.265798][T11614] loop2: detected capacity change from 0 to 512 [ 158.272799][T11605] Call Trace: [ 158.272811][T11605] [ 158.272819][T11605] dump_stack_lvl+0xf2/0x150 [ 158.279449][T11614] ext4: Bad value for 'init_itable' [ 158.282343][T11605] dump_stack+0x15/0x20 [ 158.282371][T11605] should_fail_ex+0x229/0x230 [ 158.303913][T11605] should_fail+0xb/0x10 [ 158.308084][T11605] should_fail_usercopy+0x1a/0x20 [ 158.313192][T11605] _copy_to_user+0x1e/0xa0 [ 158.317655][T11605] simple_read_from_buffer+0xa0/0x110 [ 158.323034][T11605] proc_fail_nth_read+0xfc/0x140 [ 158.327963][T11605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.333515][T11605] vfs_read+0x1a2/0x6e0 [ 158.337689][T11605] ? __rcu_read_unlock+0x4e/0x70 [ 158.342695][T11605] ? __fget_files+0x1da/0x210 [ 158.347395][T11605] ksys_read+0xeb/0x1b0 [ 158.351537][T11605] __x64_sys_read+0x42/0x50 [ 158.356083][T11605] x64_sys_call+0x27e5/0x2d70 [ 158.360821][T11605] do_syscall_64+0xc9/0x1c0 [ 158.365309][T11605] ? clear_bhb_loop+0x55/0xb0 [ 158.370041][T11605] ? clear_bhb_loop+0x55/0xb0 [ 158.374781][T11605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.380659][T11605] RIP: 0033:0x7f0f10d6567c [ 158.385080][T11605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 158.404676][T11605] RSP: 002b:00007f0f0ffc7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.413197][T11605] RAX: ffffffffffffffda RBX: 00007f0f10ef5038 RCX: 00007f0f10d6567c [ 158.421153][T11605] RDX: 000000000000000f RSI: 00007f0f0ffc70b0 RDI: 000000000000000a [ 158.429106][T11605] RBP: 00007f0f0ffc70a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.437065][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.445052][T11605] R13: 000000000000006e R14: 00007f0f10ef5038 R15: 00007fff0cb55f58 [ 158.453011][T11605] [ 158.488401][T11614] loop2: detected capacity change from 0 to 128 [ 158.502569][T11622] loop4: detected capacity change from 0 to 1024 [ 158.572602][T11622] loop4: detected capacity change from 0 to 1024 [ 158.580442][T11622] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 158.590207][T11622] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 158.601144][T11622] jbd2_journal_init_inode: Cannot locate journal superblock [ 158.608677][T11622] EXT4-fs (loop4): Could not load journal inode [ 158.685456][T11626] netlink: 'syz.4.2507': attribute type 10 has an invalid length. [ 158.703065][T11626] bond0: (slave bond_slave_0): Releasing backup interface [ 158.858676][T11639] loop4: detected capacity change from 0 to 1024 [ 158.865371][T11639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.875023][T11639] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 158.883226][T11639] System zones: 0-1, 3-12 [ 158.888154][T11639] EXT4-fs mount: 11 callbacks suppressed [ 158.888162][T11639] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.926581][T11018] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 159.039543][T11652] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.048376][T11652] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.057124][T11652] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.065857][T11652] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.075269][T11652] vxlan0: entered promiscuous mode [ 159.089305][T11652] loop4: detected capacity change from 0 to 1024 [ 159.096143][T11652] EXT4-fs: Ignoring removed nobh option [ 159.102012][T11652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.112667][T11652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.196085][T11657] loop1: detected capacity change from 0 to 512 [ 159.202806][T11657] ext4: Bad value for 'init_itable' [ 159.256644][T11657] loop1: detected capacity change from 0 to 128 [ 159.438945][T11662] loop3: detected capacity change from 0 to 512 [ 159.456032][T11662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.468642][T11662] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.617977][T11674] FAULT_INJECTION: forcing a failure. [ 159.617977][T11674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.631169][T11674] CPU: 0 PID: 11674 Comm: syz.1.2525 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 159.641322][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 159.651403][T11674] Call Trace: [ 159.654723][T11674] [ 159.657632][T11674] dump_stack_lvl+0xf2/0x150 [ 159.662210][T11674] dump_stack+0x15/0x20 [ 159.666399][T11674] should_fail_ex+0x229/0x230 [ 159.671154][T11674] should_fail+0xb/0x10 [ 159.675315][T11674] should_fail_usercopy+0x1a/0x20 [ 159.680331][T11674] _copy_to_user+0x1e/0xa0 [ 159.684807][T11674] simple_read_from_buffer+0xa0/0x110 [ 159.690188][T11674] proc_fail_nth_read+0xfc/0x140 [ 159.695123][T11674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.700737][T11674] vfs_read+0x1a2/0x6e0 [ 159.704933][T11674] ? __rcu_read_unlock+0x4e/0x70 [ 159.709955][T11674] ? __fget_files+0x1da/0x210 [ 159.714755][T11674] ksys_read+0xeb/0x1b0 [ 159.718891][T11674] __x64_sys_read+0x42/0x50 [ 159.723378][T11674] x64_sys_call+0x27e5/0x2d70 [ 159.728207][T11674] do_syscall_64+0xc9/0x1c0 [ 159.732774][T11674] ? clear_bhb_loop+0x55/0xb0 [ 159.737510][T11674] ? clear_bhb_loop+0x55/0xb0 [ 159.742233][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.748130][T11674] RIP: 0033:0x7f29c11e767c [ 159.752557][T11674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 159.772149][T11674] RSP: 002b:00007f29c046a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.780541][T11674] RAX: ffffffffffffffda RBX: 00007f29c1376f60 RCX: 00007f29c11e767c [ 159.788657][T11674] RDX: 000000000000000f RSI: 00007f29c046a0b0 RDI: 0000000000000013 [ 159.796615][T11674] RBP: 00007f29c046a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.804571][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.812763][T11674] R13: 000000000000000b R14: 00007f29c1376f60 R15: 00007ffc0540b0d8 [ 159.820792][T11674] [ 159.825944][T11018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.881441][T11678] loop1: detected capacity change from 0 to 764 [ 159.891483][T11678] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 159.932517][T11688] loop4: detected capacity change from 0 to 128 [ 160.170856][T11662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.295986][T11702] loop4: detected capacity change from 0 to 1024 [ 160.371589][T11702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.407020][T11018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.463309][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.463745][T11719] loop3: detected capacity change from 0 to 512 [ 160.473801][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.489932][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.491890][T11719] EXT4-fs (loop3): orphan cleanup on readonly fs [ 160.500385][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.500403][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.508682][T11719] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.2541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 160.516628][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.530058][T11719] EXT4-fs error (device loop3): ext4_quota_enable:7037: comm syz.3.2541: Bad quota inode: 4, type: 1 [ 160.545385][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.576420][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.576677][T11719] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.586226][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.586240][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.586256][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.586266][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.586280][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.602684][T11719] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 160.611277][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.611291][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.611303][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.619865][T11722] loop4: detected capacity change from 0 to 2048 [ 160.624033][T11719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.655424][T11722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.729568][T10780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.740417][T11718] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.757526][T11718] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 160.769937][T11718] EXT4-fs (loop4): This should not happen!! Data will be lost [ 160.769937][T11718] [ 160.779692][T11718] EXT4-fs (loop4): Total free blocks count 0 [ 160.785835][T11718] EXT4-fs (loop4): Free/Dirty block details [ 160.791723][T11718] EXT4-fs (loop4): free_blocks=2415919104 [ 160.797466][T11718] EXT4-fs (loop4): dirty_blocks=16 [ 160.802571][T11718] EXT4-fs (loop4): Block reservation details [ 160.808564][T11718] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 160.824979][ T3112] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 160.881668][T11729] gretap0: entered promiscuous mode [ 160.915650][T11736] loop1: detected capacity change from 0 to 512 [ 160.922334][T11736] ext4: Bad value for 'init_itable' [ 160.937491][T11739] loop4: detected capacity change from 0 to 1024 [ 160.959479][T11739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.977447][T11736] loop1: detected capacity change from 0 to 128 [ 160.992800][T11018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.994031][T11747] loop3: detected capacity change from 0 to 512 [ 161.010075][T11747] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.021211][T11747] EXT4-fs (loop3): 1 truncate cleaned up [ 161.027388][T11747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.042362][T11747] bridge0: port 3(syz_tun) entered blocking state [ 161.048869][T11747] bridge0: port 3(syz_tun) entered disabled state [ 161.055524][T11747] syz_tun: entered allmulticast mode [ 161.061494][T11747] syz_tun: entered promiscuous mode [ 161.068098][T11747] bridge0: port 3(syz_tun) entered blocking state [ 161.074644][T11747] bridge0: port 3(syz_tun) entered forwarding state [ 161.082204][T11747] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 161.105946][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 161.106010][ T29] audit: type=1400 audit(1719988292.508:3203): avc: denied { create } for pid=11746 comm="syz.3.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 161.114408][T11747] EXT4-fs error (device loop3): __ext4_iget:4906: inode #13: block 8192: comm syz.3.2550: invalid block [ 161.149985][T10780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.201227][T11761] 9pnet_fd: Insufficient options for proto=fd [ 161.215717][T11763] __nla_validate_parse: 10 callbacks suppressed [ 161.215728][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 161.252585][T11765] loop3: detected capacity change from 0 to 764 [ 161.259504][T11765] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 161.846441][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'. [ 161.871685][ T29] audit: type=1400 audit(1719988293.268:3204): avc: denied { ioctl } for pid=11781 comm="syz.1.2562" path="socket:[41520]" dev="sockfs" ino=41520 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.911230][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'. [ 161.920499][T11790] 9pnet_fd: Insufficient options for proto=fd [ 161.936326][T11792] loop2: detected capacity change from 0 to 512 [ 161.943189][T11792] ext4: Bad value for 'init_itable' [ 161.965456][T11800] netlink: 'syz.4.2571': attribute type 1 has an invalid length. [ 161.990498][T11792] loop2: detected capacity change from 0 to 128 [ 161.999562][ T29] audit: type=1326 audit(1719988293.398:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.1.2574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29c11e8b99 code=0x0 [ 162.007042][T11806] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2573'. [ 162.042791][T11808] loop4: detected capacity change from 0 to 164 [ 162.132362][T11811] loop4: detected capacity change from 0 to 1024 [ 162.146893][T11811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.175918][T11811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 162.184059][T11811] System zones: 0-1, 3-12 [ 162.189022][T11811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.191550][T11817] loop3: detected capacity change from 0 to 128 [ 162.283759][T11823] 9pnet_fd: Insufficient options for proto=fd [ 162.298900][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 162.449425][ T29] audit: type=1400 audit(1719988293.848:3206): avc: denied { mounton } for pid=11839 comm="syz.2.2584" path="/proc/73/task" dev="proc" ino=42566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 162.571377][T11844] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.814959][T11850] loop2: detected capacity change from 0 to 1024 [ 162.825646][T11850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.850824][T11854] loop1: detected capacity change from 0 to 128 [ 162.851753][T11041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.904853][ T29] audit: type=1400 audit(1719988294.308:3207): avc: denied { lock } for pid=11856 comm="syz.1.2590" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.955330][T11867] loop2: detected capacity change from 0 to 512 [ 162.962541][T11867] ext4: Bad value for 'init_itable' [ 163.017408][T11867] loop2: detected capacity change from 0 to 128 [ 163.277037][ T29] audit: type=1326 audit(1719988294.678:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.3.2603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f10d66b99 code=0x0 [ 163.383417][T11889] netlink: 'syz.3.2603': attribute type 10 has an invalid length. [ 163.393777][T11889] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.403900][T11889] bond0: (slave team0): Enslaving as an active interface with an up link [ 163.450324][T11895] loop2: detected capacity change from 0 to 1024 [ 163.458933][T11895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.477244][T11895] Unsupported ieee802154 address type: 0 [ 163.519784][T11041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.642405][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 163.816912][ T29] audit: type=1400 audit(1719988295.218:3209): avc: denied { ioctl } for pid=11919 comm="syz.1.2616" path="socket:[42709]" dev="sockfs" ino=42709 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.871498][T11926] loop1: detected capacity change from 0 to 764 [ 163.878596][T11926] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 163.936001][T11935] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 163.943826][T11935] netlink: 'syz.2.2620': attribute type 2 has an invalid length. [ 164.019625][ T29] audit: type=1326 audit(1719988295.418:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0694a3ab99 code=0x7ffc0000 [ 164.043317][ T29] audit: type=1326 audit(1719988295.418:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0694a3ab99 code=0x7ffc0000 [ 164.066858][ T29] audit: type=1326 audit(1719988295.418:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.2.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0694a3ab99 code=0x7ffc0000 [ 164.129158][T11953] loop3: detected capacity change from 0 to 128 [ 164.136045][T11953] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 164.282776][ T3112] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 164.308974][ T3112] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 164.901890][T11953] syz.3.2626 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 164.916104][T11953] CPU: 1 PID: 11953 Comm: syz.3.2626 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 164.926301][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 164.936364][T11953] Call Trace: [ 164.939640][T11953] [ 164.942601][T11953] dump_stack_lvl+0xf2/0x150 [ 164.947201][T11953] dump_stack+0x15/0x20 [ 164.951490][T11953] dump_header+0x83/0x2d0 [ 164.955984][T11953] oom_kill_process+0x33e/0x4c0 [ 164.960844][T11953] out_of_memory+0x9af/0xbe0 [ 164.965436][T11953] mem_cgroup_out_of_memory+0x13e/0x190 [ 164.971053][T11953] try_charge_memcg+0x745/0xcd0 [ 164.973322][T11963] loop1: detected capacity change from 0 to 1024 [ 164.975897][T11953] ? get_page_from_freelist+0x1a2a/0x1a70 [ 164.987967][T11953] obj_cgroup_charge_pages+0xbd/0x1d0 [ 164.993397][T11953] __memcg_kmem_charge_page+0x9d/0x170 [ 164.997153][T11963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.998845][T11953] __alloc_pages_noprof+0x1bc/0x360 [ 165.016022][T11953] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 165.021521][T11953] alloc_pages_noprof+0xe1/0x100 [ 165.026491][T11953] __vmalloc_node_range_noprof+0x719/0xef0 [ 165.032313][T11953] kvmalloc_node_noprof+0x121/0x170 [ 165.037510][T11953] ? ip_set_alloc+0x1f/0x30 [ 165.042014][T11953] ip_set_alloc+0x1f/0x30 [ 165.046418][T11953] hash_netiface_create+0x273/0x730 [ 165.051632][T11953] ? __nla_parse+0x40/0x60 [ 165.056117][T11953] ? __pfx_hash_netiface_create+0x10/0x10 [ 165.061891][T11953] ip_set_create+0x359/0x8a0 [ 165.066481][T11953] ? memchr+0x1/0x50 [ 165.070369][T11953] ? __nla_parse+0x40/0x60 [ 165.074774][T11953] nfnetlink_rcv_msg+0x4a9/0x570 [ 165.079744][T11953] netlink_rcv_skb+0x12c/0x230 [ 165.084567][T11953] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 165.090022][T11953] nfnetlink_rcv+0x16c/0x15b0 [ 165.094771][T11953] ? kmem_cache_free+0xd8/0x280 [ 165.099692][T11953] ? nlmon_xmit+0x51/0x60 [ 165.104016][T11953] ? __kfree_skb+0x102/0x150 [ 165.108629][T11953] ? consume_skb+0x57/0x180 [ 165.113143][T11953] ? nlmon_xmit+0x51/0x60 [ 165.117487][T11953] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 165.122783][T11953] ? __dev_queue_xmit+0xb21/0x1e50 [ 165.127976][T11953] ? ref_tracker_free+0x3a5/0x410 [ 165.133033][T11953] ? __netlink_deliver_tap+0x495/0x4c0 [ 165.138488][T11953] netlink_unicast+0x58d/0x660 [ 165.143249][T11953] netlink_sendmsg+0x5ca/0x6e0 [ 165.148042][T11953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.153320][T11953] __sock_sendmsg+0x140/0x180 [ 165.158056][T11953] ____sys_sendmsg+0x312/0x410 [ 165.162894][T11953] __sys_sendmsg+0x1e9/0x280 [ 165.167472][T11953] ? futex_wait+0x18e/0x1c0 [ 165.171980][T11953] __x64_sys_sendmsg+0x46/0x50 [ 165.176763][T11953] x64_sys_call+0xb25/0x2d70 [ 165.181371][T11953] do_syscall_64+0xc9/0x1c0 [ 165.185927][T11953] ? clear_bhb_loop+0x55/0xb0 [ 165.190610][T11953] ? clear_bhb_loop+0x55/0xb0 [ 165.195282][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.201165][T11953] RIP: 0033:0x7f0f10d66b99 [ 165.205569][T11953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.225234][T11953] RSP: 002b:00007f0f0ffe8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.233637][T11953] RAX: ffffffffffffffda RBX: 00007f0f10ef4f60 RCX: 00007f0f10d66b99 [ 165.241616][T11953] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 165.249605][T11953] RBP: 00007f0f10dd5a7a R08: 0000000000000000 R09: 0000000000000000 [ 165.257564][T11953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.265573][T11953] R13: 000000000000000b R14: 00007f0f10ef4f60 R15: 00007fff0cb55f58 [ 165.273535][T11953] [ 165.276594][T11953] memory: usage 307200kB, limit 307200kB, failcnt 139 [ 165.284234][T11953] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 165.292492][T11953] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 165.299821][T11953] Memory cgroup stats for /syz3: [ 165.299975][T11953] cache 4096 [ 165.308143][T11953] rss 0 [ 165.310892][T11953] shmem 0 [ 165.313814][T11953] mapped_file 6373376 [ 165.317819][T11953] dirty 0 [ 165.320797][T11953] writeback 0 [ 165.324093][T11953] workingset_refault_anon 35 [ 165.328764][T11953] workingset_refault_file 81 [ 165.333413][T11953] swap 454656 [ 165.336718][T11953] swapcached 0 [ 165.340089][T11953] pgpgin 167889 [ 165.343582][T11953] pgpgout 167888 [ 165.347141][T11953] pgfault 177602 [ 165.350733][T11953] pgmajfault 29 [ 165.354213][T11953] inactive_anon 0 [ 165.357832][T11953] active_anon 0 [ 165.361285][T11953] inactive_file 4096 [ 165.365219][T11953] active_file 0 [ 165.368679][T11953] unevictable 0 [ 165.372216][T11953] hierarchical_memory_limit 314572800 [ 165.377655][T11953] hierarchical_memsw_limit 9223372036854771712 [ 165.383833][T11953] total_cache 4096 [ 165.387565][T11953] total_rss 0 [ 165.390895][T11953] total_shmem 0 [ 165.394402][T11953] total_mapped_file 6373376 [ 165.398889][T11953] total_dirty 0 [ 165.402340][T11953] total_writeback 0 [ 165.406183][T11953] total_workingset_refault_anon 35 [ 165.411330][T11953] total_workingset_refault_file 81 [ 165.416482][T11953] total_swap 454656 [ 165.420278][T11953] total_swapcached 0 [ 165.424169][T11953] total_pgpgin 167889 [ 165.428129][T11953] total_pgpgout 167888 [ 165.432179][T11953] total_pgfault 177602 [ 165.436273][T11953] total_pgmajfault 29 [ 165.440242][T11953] total_inactive_anon 0 [ 165.444431][T11953] total_active_anon 0 [ 165.448464][T11953] total_inactive_file 4096 [ 165.452909][T11953] total_active_file 0 [ 165.456937][T11953] total_unevictable 0 [ 165.460909][T11953] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1985,pid=10056,uid=0 [ 165.475977][T11953] Memory cgroup out of memory: Killed process 10057 (syz.3.1985) total-vm:86972kB, anon-rss:456kB, file-rss:16188kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 165.708465][T11987] loop2: detected capacity change from 0 to 128 [ 165.801575][T10096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.896251][T11987] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.915543][T11987] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.944220][T11953] ================================================================== [ 165.948440][T11987] 9pnet_fd: Insufficient options for proto=fd [ 165.952311][T11953] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 165.968122][T11953] [ 165.970441][T11953] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 0: [ 165.978507][T11953] tick_do_update_jiffies64+0x112/0x1b0 [ 165.984061][T11953] tick_nohz_handler+0x7c/0x2d0 [ 165.988911][T11953] __hrtimer_run_queues+0x20d/0x5e0 [ 165.994110][T11953] hrtimer_interrupt+0x210/0x7b0 [ 165.999045][T11953] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 166.004940][T11953] sysvec_apic_timer_interrupt+0x6e/0x80 [ 166.010577][T11953] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.016564][T11953] __tsan_read8+0xc0/0x180 [ 166.020982][T11953] lruvec_page_state+0x3c/0xd0 [ 166.025751][T11953] do_try_to_free_pages+0x94d/0xc50 [ 166.030953][T11953] try_to_free_mem_cgroup_pages+0x1eb/0x4e0 [ 166.036840][T11953] try_charge_memcg+0x27a/0xcd0 [ 166.041691][T11953] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 166.047884][T11953] __read_swap_cache_async+0x2b9/0x520 [ 166.053359][T11953] swap_cluster_readahead+0x276/0x3f0 [ 166.058742][T11953] swapin_readahead+0xe2/0x7a0 [ 166.063516][T11953] do_swap_page+0x3bc/0x1840 [ 166.068109][T11953] handle_mm_fault+0x809/0x2a80 [ 166.072966][T11953] exc_page_fault+0x3b9/0x650 [ 166.077645][T11953] asm_exc_page_fault+0x26/0x30 [ 166.082499][T11953] [ 166.084818][T11953] read to 0xffffffff860079c0 of 8 bytes by task 11953 on cpu 1: [ 166.092437][T11953] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 166.098770][T11953] count_shadow_nodes+0x6b/0x230 [ 166.103716][T11953] do_shrink_slab+0x5a/0x690 [ 166.108324][T11953] shrink_slab+0x4ed/0x860 [ 166.112750][T11953] shrink_node+0xa0d/0x13c0 [ 166.117260][T11953] do_try_to_free_pages+0x3c6/0xc50 [ 166.122538][T11953] try_to_free_mem_cgroup_pages+0x1eb/0x4e0 [ 166.128438][T11953] try_charge_memcg+0x27a/0xcd0 [ 166.133287][T11953] obj_cgroup_charge_pages+0xbd/0x1d0 [ 166.138676][T11953] __memcg_kmem_charge_page+0x9d/0x170 [ 166.144232][T11953] __alloc_pages_noprof+0x1bc/0x360 [ 166.149433][T11953] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 166.154894][T11953] alloc_pages_noprof+0xe1/0x100 [ 166.159853][T11953] __vmalloc_node_range_noprof+0x719/0xef0 [ 166.165656][T11953] kvmalloc_node_noprof+0x121/0x170 [ 166.170851][T11953] ip_set_alloc+0x1f/0x30 [ 166.175186][T11953] hash_netiface_create+0x273/0x730 [ 166.180386][T11953] ip_set_create+0x359/0x8a0 [ 166.184985][T11953] nfnetlink_rcv_msg+0x4a9/0x570 [ 166.189926][T11953] netlink_rcv_skb+0x12c/0x230 [ 166.194708][T11953] nfnetlink_rcv+0x16c/0x15b0 [ 166.199400][T11953] netlink_unicast+0x58d/0x660 [ 166.204170][T11953] netlink_sendmsg+0x5ca/0x6e0 [ 166.208930][T11953] __sock_sendmsg+0x140/0x180 [ 166.213601][T11953] ____sys_sendmsg+0x312/0x410 [ 166.218353][T11953] __sys_sendmsg+0x1e9/0x280 [ 166.222928][T11953] __x64_sys_sendmsg+0x46/0x50 [ 166.227679][T11953] x64_sys_call+0xb25/0x2d70 [ 166.232261][T11953] do_syscall_64+0xc9/0x1c0 [ 166.236871][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.242752][T11953] [ 166.245060][T11953] value changed: 0x00000000ffffcb9d -> 0x00000000ffffcb9e [ 166.252234][T11953] [ 166.254543][T11953] Reported by Kernel Concurrency Sanitizer on: [ 166.260673][T11953] CPU: 1 PID: 11953 Comm: syz.3.2626 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 166.270808][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 166.280853][T11953] ================================================================== [ 166.360563][T11041] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.567369][ T30] oom_reaper: reaped process 10057 (syz.3.1985), now anon-rss:0kB, file-rss:15116kB, shmem-rss:0kB [ 167.580704][T11952] syz.3.2626 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 167.591738][T11952] CPU: 0 PID: 11952 Comm: syz.3.2626 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 167.602003][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 167.612042][T11952] Call Trace: [ 167.615368][T11952] [ 167.618279][T11952] dump_stack_lvl+0xf2/0x150 [ 167.622911][T11952] dump_stack+0x15/0x20 [ 167.627066][T11952] dump_header+0x83/0x2d0 [ 167.631454][T11952] oom_kill_process+0x33e/0x4c0 [ 167.636344][T11952] out_of_memory+0x9af/0xbe0 [ 167.640914][T11952] mem_cgroup_out_of_memory+0x13e/0x190 [ 167.646508][T11952] try_charge_memcg+0x745/0xcd0 [ 167.651363][T11952] ? _raw_spin_unlock+0x26/0x50 [ 167.656252][T11952] ? radix_tree_lookup+0xf9/0x150 [ 167.661258][T11952] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 167.667304][T11952] __read_swap_cache_async+0x2b9/0x520 [ 167.672795][T11952] swap_cluster_readahead+0x276/0x3f0 [ 167.678207][T11952] swapin_readahead+0xe2/0x7a0 [ 167.683021][T11952] ? __filemap_get_folio+0x420/0x5b0 [ 167.688323][T11952] ? swap_cache_get_folio+0x6e/0x210 [ 167.693606][T11952] do_swap_page+0x3bc/0x1840 [ 167.698196][T11952] ? cgroup_rstat_updated+0x99/0x550 [ 167.703585][T11952] ? __rcu_read_lock+0x36/0x50 [ 167.708334][T11952] handle_mm_fault+0x809/0x2a80 [ 167.713198][T11952] ? mas_walk+0x204/0x320 [ 167.717664][T11952] exc_page_fault+0x3b9/0x650 [ 167.722421][T11952] asm_exc_page_fault+0x26/0x30 [ 167.727273][T11952] RIP: 0033:0x7f0f10c3b554 [ 167.731739][T11952] Code: 00 69 3d 63 b1 de 00 e8 03 00 00 48 8d 1d 24 9a 2b 00 e8 af b5 12 00 eb 11 0f 1f 44 00 00 48 81 c3 d8 00 00 00 48 39 dd 74 bc <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 87 ee ff ff eb [ 167.751402][T11952] RSP: 002b:00007fff0cb56040 EFLAGS: 00010202 [ 167.757473][T11952] RAX: 0000000000000000 RBX: 00007f0f10ef4f60 RCX: 0000000000000000 [ 167.765500][T11952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557cd13808 [ 167.773458][T11952] RBP: 00007f0f10ef6a60 R08: 0000000000000000 R09: 7fffffffffffffff [ 167.781485][T11952] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000285ec [ 167.789443][T11952] R13: 0000000000000032 R14: 00007f0f10ef6a60 R15: 00007f0f10ef5038 [ 167.797406][T11952] [ 167.800527][T11952] memory: usage 307200kB, limit 307200kB, failcnt 13527 [ 167.807643][T11952] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 167.815621][T11952] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 167.823019][T11952] Memory cgroup stats for /syz3: [ 167.823160][T11952] cache 0 [ 167.830997][T11952] rss 0 [ 167.833765][T11952] shmem 0 [ 167.836704][T11952] mapped_file 6369280 [ 167.840716][T11952] dirty 0 [ 167.843627][T11952] writeback 0 [ 167.846897][T11952] workingset_refault_anon 36 [ 167.851461][T11952] workingset_refault_file 81 [ 167.856062][T11952] swap 454656 [ 167.859327][T11952] swapcached 0 [ 167.862714][T11952] pgpgin 167890 [ 167.866170][T11952] pgpgout 167890 [ 167.869688][T11952] pgfault 177602 [ 167.873205][T11952] pgmajfault 29 [ 167.876652][T11952] inactive_anon 0 [ 167.880278][T11952] active_anon 0 [ 167.883708][T11952] inactive_file 0 [ 167.887425][T11952] active_file 0 [ 167.890929][T11952] unevictable 0 [ 167.894386][T11952] hierarchical_memory_limit 314572800 [ 167.899786][T11952] hierarchical_memsw_limit 9223372036854771712 [ 167.905995][T11952] total_cache 0 [ 167.909427][T11952] total_rss 0 [ 167.912685][T11952] total_shmem 0 [ 167.916190][T11952] total_mapped_file 6369280 [ 167.920667][T11952] total_dirty 0 [ 167.924132][T11952] total_writeback 0 [ 167.927925][T11952] total_workingset_refault_anon 36 [ 167.933009][T11952] total_workingset_refault_file 81 [ 167.938207][T11952] total_swap 454656 [ 167.942044][T11952] total_swapcached 0 [ 167.945967][T11952] total_pgpgin 167890 [ 167.949920][T11952] total_pgpgout 167890 [ 167.954036][T11952] total_pgfault 177602 [ 167.958113][T11952] total_pgmajfault 29 [ 167.962072][T11952] total_inactive_anon 0 [ 167.966228][T11952] total_active_anon 0 [ 167.970182][T11952] total_inactive_file 0 [ 167.974355][T11952] total_active_file 0 [ 167.978331][T11952] total_unevictable 0 [ 167.982303][T11952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2626,pid=11952,uid=0 [ 167.997386][T11952] Memory cgroup out of memory: Killed process 11952 (syz.3.2626) total-vm:80732kB, anon-rss:456kB, file-rss:10164kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000