last executing test programs: 5.414198208s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_io_uring_setup(0x1ed2, &(0x7f0000000080)={0x0, 0x9906, 0x10100, 0x0, 0x80073}, &(0x7f0000000300), &(0x7f0000000140)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) perf_event_open(&(0x7f0000000480)={0x5, 0xffffffffffffff0a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa19a, 0x2, @perf_config_ext={0x7fffffff, 0xfffffffffffffffb}, 0x0, 0x1, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$EVIOCGBITSW(r2, 0x40044591, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000100)=0x12, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0xd, 0x0, 0x0, 0x0, &(0x7f0000001000/0x1000)=nil, 0x1000}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x24}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) 5.207614761s ago: executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "5b6f16fc213dd750e9c6540d9434157c0cc109"}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)="c3db32903453b3f3f48e6c6fdceb119f8040466741d8d499447516420e0e19033a1c90ed20e6af3014772bc598433ddd80e128b5dc9878d34b66d9889b055c26f3e5100714d8549c283e3d7bf2d69515786acc71a0a6f2d741b588eb6828f3c355f2d134284c20f07f68d4e9e47618151c7429f7a70d763540b0ba6bf6846da1623f77e40e820d2f85cc44ea255a9976f253", 0x92}], 0x1}}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000), 0x4) socketpair(0x0, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x2, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r4, 0x8004745a, 0x20000000) perf_event_open$cgroup(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0x300000000000000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000380)={0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) 5.039694197s ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read(0xffffffffffffffff, &(0x7f00000000c0)=""/29, 0x1d) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 4.994321953s ago: executing program 0: r0 = socket(0xa, 0x6, 0x10000005) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_emit_ethernet(0xfdef, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) r1 = io_uring_setup(0x1de1, &(0x7f0000000440)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x0, 0x0, 0x80000001, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@ifindex=r4, r2, 0x11, 0x4, 0x0, @link_id, r3}, 0x20) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x20000002, 0x0) socket$netlink(0x10, 0x3, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) capset(&(0x7f0000000180), &(0x7f0000000140)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) socket(0xa, 0x6, 0x10000005) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) (async) io_uring_setup(0x1de1, &(0x7f0000000440)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pipe(&(0x7f0000000000)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x0, 0x0, 0x80000001, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@ifindex=r4, r2, 0x11, 0x4, 0x0, @link_id, r3}, 0x20) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x20000002, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) (async) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) (async) capset(&(0x7f0000000180), &(0x7f0000000140)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (async) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) (async) 4.933537913s ago: executing program 0: sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x50}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0xa4}, {0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100800001) syz_emit_ethernet(0xe26, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 4.863941824s ago: executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) (async, rerun: 32) semget$private(0x0, 0x0, 0x0) (rerun: 32) semop(0x0, 0x0, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r5}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r6, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=0x1, r4, 0x2f, 0x0, 0xffffffffffffffff, @link_id}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) (async) ptrace(0x10, 0x1) (async, rerun: 32) r7 = inotify_init1(0x0) (rerun: 32) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x420e, r8, 0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) (async, rerun: 32) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (rerun: 32) lseek(r9, 0xffffffffffffff7f, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x1ffffffffffffd9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.092613655s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ef4040, &(0x7f00000001c0)={[{@bsdgroups}, {@bh}, {@nombcache}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xffffffffffffffff}}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xfe, 0x47f, &(0x7f0000000940)="$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") writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) ustat(0xd13, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x7, 0x8, 0x3, 0x100, 0x4}, @generic={0x7, 0x0, 0x0, 0x8}, @func]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000300)=[{0x3, 0x3, 0xf, 0xb}, {0x0, 0x0, 0x0, 0x5}, {0x2, 0x2, 0xa, 0x6}, {0x2, 0x4, 0xd, 0x3}, {0x1, 0x3, 0x0, 0xb}, {0x0, 0x4, 0xd}], 0x10, 0x80}, 0x90) syz_open_dev$usbfs(0x0, 0x76, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x80005520, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000580), 0x4860020, 0x0) accept$inet(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) fchdir(0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x13ec, 0x7ffe}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x18, 0x2, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}], &(0x7f0000000600)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41100, 0x53, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x6, 0xd7, 0x7}, 0x10, 0x0, r5, 0x0, &(0x7f0000001e40)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r4], &(0x7f0000001e80)}, 0x90) 1.998341419s ago: executing program 2: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000000000000000200010000000000000001001000002100000"], 0x20}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mknod(&(0x7f0000000480)='./file0\x00', 0x8, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x191300, 0x1a7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x7, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x474de}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000000), 0x9) r2 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0007000000000000c20400000000072f"], 0x40) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040), 0x4) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000340)={0x0, 0x4, 0x0, {0x8, 0xfffffc00}, 0x8, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000180)="b06c24883d", 0x5}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="d786f9bea7816d646e89c8bc624d25ca497fa2aad5d362285bfd446367645c543f1415688c00879e0ea21c0d66caf3d9adbf2764c9", 0x35}, {&(0x7f00000003c0)="5b2a1d2344ed23891cb2cea97be72c9e88846710c96b459b855cfc8784b3e970ff73402fa28b596c26651c1c62bef9b46b6d6794c3aab6e1de2668119e01cbe97491ae3d0209e5ca9af092a07eace121ef1f8ad3be56fb2f5903ef06cc44c65d3d79ba71e28b00339a830d6e3ead72a53336f9d334417053871d71f6ad68ead08f11dc18230a033160974f14c96bc5ff7517e408c81026da27ca98607ffe34e99a1e84ae20e8da41fa2a9d6e", 0xac}], 0x5) write$UHID_CREATE2(r5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0xa003a5b4, 0x0, &(0x7f00000000c0)={0x0, 0x11}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[], 0x69) socket$inet6_sctp(0xa, 0x5, 0x84) 1.897609625s ago: executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = getpid() syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) r1 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x5, 0xffffffffffffffff, 0x0) (async) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000001100)=""/4096) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002200)='\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setgid(r2) (async) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0xb, 0x0, @tid=r3}, &(0x7f0000000100)) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000800)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0800a400", @ANYRES32, @ANYBLOB="9176e5a7073deb2aa3cc3b1a6c28d753603b639e5ddae27141d3ced758a452033e2e6595ef96148bbb6f25d2a12f3868416381181442097ccb1c0ad1ce86ec919122ac6675c633363245a87be36907005751aaa362c44a75984defd4bff574b0706f7b4404e1bf83dbb781173c2728a2f2e8a94238664cc8fd9a06cbbd234e5bbb6f3b68fad3468ca6175f919bd6275bbc50ee936e3f7c514aefa6d152"], 0x24}, {0x0, 0x1348}, {&(0x7f0000002b00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="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"], 0x27e0}], 0x3, 0x0, 0x100, 0x20000000}, 0x5) (async) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="1940", 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000300)) 1.86415561s ago: executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x0, 0x800, 0x7, 0x138, 0xffffffffffffffff, 0x1}, 0x45) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x15) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000440)=0xffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='\x00', 0x1008002, &(0x7f0000000680)={[{@grpquota}, {@oldalloc}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@orlov}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x0, 0x5f0, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb9ff2c39f860f42794500002000000000002f9078000000000000000000010000000c9078b6757c5a"], 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000080)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x351, 0x0, 0x401}, r2, 0xe, 0xffffffffffffffff, 0x9) io_setup(0x9, &(0x7f0000000b80)=0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc04100}]}) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x4ee, 0x0, 0x2}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000748000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r7, 0x0) 1.754621487s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='#}-%]*]}:(,@}/\'[)^-\xbd!-+\x00', 0x0, 0xffffffffffffff9c) r0 = timerfd_create(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x5) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000100)=""/206, 0xce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128008000100677470002400028008000500", @ANYRES32, @ANYBLOB='\b\x00\a'], 0x50}}, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0x10001, 0x7) 1.482706089s ago: executing program 3: syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8}, 0x48) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r3, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000a80)={&(0x7f0000000340), 0xc, &(0x7f0000000a40)={&(0x7f00000003c0)={0x14, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x120, 0x0, 0x0, 0x900, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x71752d61}]}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x48800) (async) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000880)={0x7, 0x1b, 0x2}, 0x7) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 1.408278771s ago: executing program 4: sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x50}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0xa4}, {0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100800001) syz_emit_ethernet(0xe26, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86"], 0x0) 1.395233833s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022000106", @ANYRES16=r0], 0x1c}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffe, 0x4, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) (async) getrusage(0x0, 0x0) 1.329412844s ago: executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={0x44800, 0x40, 0x2a}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c5002, 0x0) ftruncate(r0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f00000004c0)={'binder0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000f0ffffff9500000000000000325092e9d36e6e8ebb538de97777b1b2542a6c6bb2a87d429ebf4b6ec66996612d1523246b016b3ac20f7c1b1dd621d8acd6ceb9bfba97d6407a63a6d13715128c9beb7cc1d2eaf512bb7801"], &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0120000000000000000001000000080000000500030000000000050003000000000005000300000000000500030005000000080001000300"/74], 0x50}}, 0x0) 1.325286664s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001180)='./file0\x00', 0x480, &(0x7f0000000040)={[{@mblk_io_submit}, {@usrjquota}]}, 0x3, 0x77d, &(0x7f0000001940)="$eJzs3d9rW1UcAPDvzdJ2dtNVEHS+WBC0MJa6WTcFHyY+iOBgoM9uIc3KbNqMJh1rKegQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5abKla9Kma9Ns5POB256Te2/O+ebcHye5h3sD6Fuj6Z9MxMGI+DiJOFB/PYmIgVoqG3Fidblby0uFdEpiZeXNP5PaMjeXlwrRtE5qXz3zRET89EHEocz6cisLi9P5Uqk4V8+PV2fOj1cWFg+fm8lPFaeKs8eOTEwcPf7C8WM7F+vfvy7uv/bJa89+e+Lf9x+/8tHPSZyI/fV5zXHslNEYrX8mA+lHuMar8e5OF9dTSa8rwD1Jd809q3t5HEzSdLbXVQIAuiztha4AAH0mcf4HgD7T+B3g5vJSoTH19heJ3XX9lYjYuxp/4/rm6pxs/Zrd3tp10OGbyZorI0lEjOxA+aMR8eX3b3+dTtGl65AArbx3KSLOjIyuP/4na8YstBjCsannmtKDbZYZvSvv+Ae754e0//Niq/5f5nb/J1r0f4Za7Lv3YvP9P3N1g9W3Pewo7f+93DS27VZT/HUje+q5h2t9voHk7LlSMT22PRIRYzEwlOaPbFDG2I3/brSb19z/++vTd75Ky0//31kiczU7tHadyXw1v52Ym12/FPFktlX8ye32T9r0f091WMbrL334Rbt5afxpvI1pffzdtXI54pmW7X9n00o2HJ84XtscxhsbRQvf/fb5cLvym9s/ndLyG98FdkPa/sMbxz+SNI/XrGy9jF8uH/ix3bzN42+9/Q8mb9XSjX7FxXy1OnckYjB5Y/3rR++s28g3lk/jH3u69f6/0faffic802H82Wt/fHPv8XdXGv/kltp/64krt6b3tCu/s/afqKXG6q90cvzrtILb+ewAAAAAAAAAAAAAAAAAAAAAAAAAoFOZiNgfSSZ3O53J5HKrz/B+LIYzpXKleuhseX52MmrPyh6JgUzjVpcHVm8Dm6rd/3Sk6f6oR+/KPx8Rj0bEZ0MP1fK5Qrk02ePYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBhX5vn/6d+H+p17QCArtnb6woAALvO+R8A+o/zPwD0H+d/AOg/zv8A0H+c/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiyUydPptPKP8tLhTQ/eWFhfrp84fBksTKdm5kv5ArlufO5qXJ5qlTMFcozm71fqVw+PxGz8xfHq8VKdbyysHh6pjw/Wz19biY/VTxdHNiVqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgayoLi9P5Uqk413EiYgsLS+xoIltvtfulPg9GYvD+qEa3E0/t7Bv2+MAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ID4PwAA///AkiRP") mkdir(&(0x7f00000002c0)='./file1\x00', 0xb) 1.152090571s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x21, &(0x7f00000001c0)={r1}, 0x8) 1.122663096s ago: executing program 4: timer_create(0x3, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r0) r1 = socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000740)={{r3, r4+10000000}, {0x77359400}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) r7 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r1, &(0x7f00000001c0)={r7, r1, 0xffffffff}) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000002c0)={0x96, 0x9, 0x7, "aac8ff699c3b1a9eae185257257d64f287e3e6cd101dc4084cec0dd584f0695a5f2321e55af754efbdc8c41a98f1a798782ff9128748e06a7dd7b8498e04555967a1cdf323a61e54fe47540b645a82af08ab631bcbdcd716d23a45fa4c5fd7d5a123135a776e1802fb0ef1622fd240dc4930023b0b86b5d4b8c7791b03c8284010c23ae8aad499cd1ccdc4a6e3fc2bcc5f230a74be08"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1.097479049s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x103, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = io_uring_setup(0x5751, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x2, &(0x7f0000000200), 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000200)=0x7ffffffb) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="5ec000554ab63aab35c59812ff02075803b3efd38b273b001e577a737cc87a987d7ac40f7d6a36add71cd7adb0441fee59b71d71d87cb4346f35c4d43a82da87eba1ff"], 0x118) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00018008000100000004000c0002"], 0x30}}, 0x0) sendmsg$inet6(r5, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e21, 0x800, @mcast1, 0x9}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000340)="951b6737972fbe1df7720d2abaf03a8b8d2d1cc19339e854151d03711816fb307c536e56f22564b68875f7138664e5d9dd18f0df01fdc3afbb8f1fc38a5b112caae06b204f3b9c193945b07852d09aabf439b770e33a000aaab242e076fcef189b5d6bfa85657b068ddf64cbe13e219c68f27547be01db52f31971cd294a0d89a5b1a46ad6690d3b4390dca7be3da291f5ddce63642219503eb22b04e178bc6982cdcfe1a643abc7d8883bf99fc353d842f7995a3aae659c0ff1dd46700f702edad2374965610a7d19795d28a8909cd9d6c0d837d56895273326db8891643732183ff542e98b", 0xe6}, {&(0x7f0000000280)="c3ed70002ca626cc89f53d39d09dddb97a143ffce3f9c7faa52542d2d1c2a706b0529bf4a955273e974346d8ecd530eb46625054a3dd968432f99c51ecb46491f245719e60113090995cb099a1f7aa3a4b9505e250bd44940109abb0c976e0b59832294a4579e99feaf084acc88a79", 0x6f}, {&(0x7f0000000080)="b45e38304ba17810137f22a2b852e5a66e98bffecc7e10ca62e45ab1beb75f49aee36177afaf7ee19ca4ec56a11aebdea81c405a3212b2247a8f5accfb", 0x3d}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f00000004c0)="b006e5a1cb1b", 0x6}], 0x5, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r8}}}, @hopopts_2292={{0xd8, 0x29, 0x36, {0x5e, 0x17, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @generic={0x0, 0x79, "1e2f0dee48fcb25431dd5d742fad3ca71c57557904fc4b3b0e295400c15e0d813011f9c168ed4b0de6886de46f02ebacab04deffb5b109958d2c0b7adc0bac92021073da7fb78a441626076fc26c41e7687cf5174da0c524160205064a746d417ca9230956fa02102c311359628d1b009e03caca0a0dfe525b"}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x2, 0x38, "ffc967884f96ce706f925b75511ae5adf50344e96488dea0bc5f20c8d6145a87cd7172ed1b04b70e0c0888f03469217c615e69b15ce96844"}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x89, 0x10, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}}}, @flowinfo={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x1c8}, 0x20000010) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x6, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.063410055s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x59, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x8) 1.062718875s ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x4}}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) r2 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r3 = dup(r2) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000ec0)=[{r4}, {r4}], 0x2, 0x7f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000000980)) write$cgroup_pid(r3, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x21, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000003c0), 0x3, 0x486, &(0x7f00000004c0)="$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") 983.576237ms ago: executing program 3: socket$inet(0x2, 0x3, 0x2) (async) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 32) bind$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x1}, 0xe) (async) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe) (async, rerun: 32) listen(r1, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4083}, 0x20) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000240)) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000000000000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_ENABLE_SE(r7, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r8, 0x0, 0x70bd23, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0xd0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, &(0x7f0000000480)) 939.802374ms ago: executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x480000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@map, r1, 0x4, 0x8, r1, @link_id}, 0x20) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000056c0)={'sit0\x00', &(0x7f0000005640)={@rand_addr=0x1, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000056c0)={'sit0\x00', &(0x7f0000005640)={@rand_addr=0x1, 0x1}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x1f, 0x5, [0x1000, 0x8, 0x8, 0x1ff, 0x6]}, &(0x7f0000005b00)=0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000005c40)={0x4, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005d80)={@map=0x1, 0xc, 0x1, 0x6, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000005cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r4, r1, 0x19, 0x2034, 0x0, @link_id=0xffffffffffffffff, r5}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r4, r1, 0x19, 0x2034, 0x0, @link_id=0xffffffffffffffff, r5}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, r1, 0x11, 0x2, 0xffffffffffffffff, @prog_id=r3, r5}, 0x20) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000540)=""/147, 0x93}], 0x1, 0x5, 0x0) (async) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000540)=""/147, 0x93}], 0x1, 0x5, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000200)=0x3e) (async) ioctl$int_in(r8, 0x5452, &(0x7f0000000200)=0x3e) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup2(r8, r9) perf_event_open(0x0, 0x0, 0x0, r9, 0x9) (async) perf_event_open(0x0, 0x0, 0x0, r9, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 917.613798ms ago: executing program 1: close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000200000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000100001050002000000000008000140000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r3, 0x4004743b, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0xec4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006980c700000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="f00000001e00130f0000000000000000ac1414aa000000000000000000000000000000000000000000000000000000010000ebfdd66bd6bd4cd0000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002bbd7000"/168], 0xf0}}, 0x0) 865.710366ms ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='veth0_virt_wifi\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0xfdef) 504.114882ms ago: executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = dup(r0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}, 0x4) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001200)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0xba01}, 0x0) 169.940404ms ago: executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = io_uring_setup(0x4f04, &(0x7f0000000180)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 150.494216ms ago: executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x5169, &(0x7f0000000140), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x80, 0xf9002fd280fa163a}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0), 0xfd, 0x4ef, &(0x7f0000000a00)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000002100010000000000000000000a1000000000000000000000140001000000000000000000000000000000000005001500020000000cdc084ad9007f601f26e9ed919352451a56063f86d1ed92c28b9cdb594ffcb61881ef99f8b690a48df99ba66d15e559a1e57ff6e7d06f4300e1608c5a5f574c4b419506a2ac40dc8bd0cbd6d376229f1ae3cb59cae9133d96fecfd9cd1a65affdd9b64575b789d534e507ab2c3d54d7ccb771fa35a7bbd7169d0362e959ccb02d9d45bf2a44618908d5b342e4bd8cd692cd57d7980511cf"], 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004400), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33, 0x8}, {0x7fff, 0x8, 0x80}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', '', [{0x20, '@}'}, {0x20, 'security.ima\x00'}, {0x20, 'GPL\x00'}]}, 0x1a) syz_open_dev$tty1(0xc, 0x4, 0x4) 120.086831ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x71000000, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 0s ago: executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) unshare(0x22020600) fdatasync(r0) r1 = open(0x0, 0x0, 0x109) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) getdents(r1, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x602) r4 = fcntl$dupfd(r3, 0x0, r3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x125, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x6256, 0x0, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$tun(r8, 0x0, 0x15) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)=""/60, 0xe4, 0x3c, 0x1, 0x8000}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7, 0xbaf, 0x84, 0x823, r8, 0x0, '\x00', 0x0, r9, 0x3, 0x4, 0x3, 0x5}, 0x48) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000540)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'wg11'}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_gt}]}, 0x21, 0x4a6, &(0x7f0000000f00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): unique to avoid problems! [ 75.487794][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.508752][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.519453][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.529261][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.539687][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.549577][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.559999][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.592454][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.602593][ T5440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.611582][ T5440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.620386][ T5440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.629158][ T5440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.641555][ T6268] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 75.732145][ T6282] loop0: detected capacity change from 0 to 256 [ 75.747182][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.764722][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.782540][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.801296][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.885531][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.929227][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.939818][ T6297] loop0: detected capacity change from 0 to 512 [ 75.959339][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.966428][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.976196][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.983315][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.989600][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.000991][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.019653][ T6302] 9pnet_fd: Insufficient options for proto=fd [ 76.020137][ T6297] ext4 filesystem being mounted at /root/syzkaller-testdir1503574746/syzkaller.rgAJCr/2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.131021][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.268982][ T6322] loop4: detected capacity change from 0 to 512 [ 76.280726][ T5836] veth0_vlan: entered promiscuous mode [ 76.299623][ T6322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.299849][ T5836] veth1_vlan: entered promiscuous mode [ 76.320926][ T6322] ext4 filesystem being mounted at /root/syzkaller-testdir3279482081/syzkaller.9e7hxI/135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.350368][ T5836] veth0_macvtap: entered promiscuous mode [ 76.356287][ T6322] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 76.367746][ T5836] veth1_macvtap: entered promiscuous mode [ 76.380695][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.391228][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.401141][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.411610][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.416371][ T6322] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 76.421449][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.421464][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.421477][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.421489][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.422663][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.484765][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.488770][ T6322] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 76.495218][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.517313][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.527864][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.537810][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.548236][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.557514][ T6322] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 76.558032][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.579965][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.592619][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.603128][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.611901][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.620632][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.629334][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.640766][ T6322] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 76.695207][ T6322] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 76.703390][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.741561][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.742470][ T5440] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.901939][ T6350] loop4: detected capacity change from 0 to 512 [ 76.911299][ T6350] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 76.923863][ T6350] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 76.978082][ T6350] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 77.101892][ T6359] loop0: detected capacity change from 0 to 256 [ 77.120676][ T6350] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.149947][ T6360] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 77.159375][ T6350] ext2 filesystem being mounted at /root/syzkaller-testdir3279482081/syzkaller.9e7hxI/137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.317672][ T6350] usb usb8: usbfs: process 6350 (syz-executor.4) did not claim interface 0 before use [ 77.344890][ T3101] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 77.547099][ T6378] loop2: detected capacity change from 0 to 512 [ 77.568737][ T6378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.582122][ T6378] ext4 filesystem being mounted at /root/syzkaller-testdir3580746925/syzkaller.o3R9Re/48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.722581][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 77.722638][ T29] audit: type=1400 audit(1718262465.227:1166): avc: denied { bind } for pid=6386 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.751121][ T29] audit: type=1400 audit(1718262465.227:1167): avc: denied { connect } for pid=6386 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.062446][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.165914][ T6403] loop0: detected capacity change from 0 to 512 [ 78.174095][ T6403] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 78.184423][ T6403] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: iget: bad i_size value: -67835469387268086 [ 78.198139][ T6403] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 78.210980][ T6403] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.226961][ T6403] ext2 filesystem being mounted at /root/syzkaller-testdir1503574746/syzkaller.rgAJCr/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.244808][ T6403] usb usb8: usbfs: process 6403 (syz-executor.0) did not claim interface 0 before use [ 78.278506][ T5440] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 78.334122][ T29] audit: type=1400 audit(1718262465.837:1168): avc: denied { unmount } for pid=3101 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.391945][ T4267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.416154][ T6418] loop0: detected capacity change from 0 to 256 [ 78.444577][ T5440] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 78.460907][ T5440] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 79.046065][ T29] audit: type=1400 audit(1718262466.547:1169): avc: denied { connect } for pid=6439 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.078782][ T6442] loop2: detected capacity change from 0 to 512 [ 79.100804][ T6442] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 79.137560][ T6442] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: iget: bad i_size value: -67835469387268086 [ 79.167526][ T6442] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 79.223853][ T6442] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.255690][ T6447] loop4: detected capacity change from 0 to 1024 [ 79.267447][ T6442] ext2 filesystem being mounted at /root/syzkaller-testdir3580746925/syzkaller.o3R9Re/54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.329417][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.340640][ T6442] usb usb8: usbfs: process 6442 (syz-executor.2) did not claim interface 0 before use [ 79.390525][ T4267] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 79.534407][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.680649][ T6464] loop1: detected capacity change from 0 to 512 [ 79.699306][ T6464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.712024][ T6464] ext4 filesystem being mounted at /root/syzkaller-testdir3188427597/syzkaller.biyRzC/6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.795720][ T6469] loop2: detected capacity change from 0 to 256 [ 79.806949][ T6469] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.817911][ T6469] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.836179][ T4267] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 79.844800][ T4267] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 80.004021][ T6481] loop3: detected capacity change from 0 to 512 [ 80.011866][ T6481] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 80.021087][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: iget: bad i_size value: -67835469387268086 [ 80.034629][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 80.047322][ T6481] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.059620][ T6481] ext2 filesystem being mounted at /root/syzkaller-testdir1016762908/syzkaller.YWR6af/15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.084392][ T29] audit: type=1326 audit(1718262467.587:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a7dc1ea9 code=0x7fc00000 [ 80.108455][ T29] audit: type=1326 audit(1718262467.587:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f54a7dc1ea9 code=0x7fc00000 [ 80.132465][ T29] audit: type=1326 audit(1718262467.587:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a7dc1ea9 code=0x7fc00000 [ 80.156515][ T29] audit: type=1326 audit(1718262467.587:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a7dc1ea9 code=0x7fc00000 [ 80.180608][ T29] audit: type=1326 audit(1718262467.587:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a7dc1ea9 code=0x7fc00000 [ 80.204765][ T29] audit: type=1326 audit(1718262467.587:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a7dc1ea9 code=0x7fc00000 [ 80.242533][ T5056] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 80.335942][ T6485] chnl_net:caif_netlink_parms(): no params data found [ 80.369549][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.397611][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.404715][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.412741][ T6485] bridge_slave_0: entered allmulticast mode [ 80.419284][ T6485] bridge_slave_0: entered promiscuous mode [ 80.426256][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.433475][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.440903][ T6485] bridge_slave_1: entered allmulticast mode [ 80.447416][ T6485] bridge_slave_1: entered promiscuous mode [ 80.467685][ T6485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.479243][ T6485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.504470][ T6485] team0: Port device team_slave_0 added [ 80.526596][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.539436][ T6485] team0: Port device team_slave_1 added [ 80.563645][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.570653][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.597454][ T6485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.670890][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.677944][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.704090][ T6485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.751365][ T6485] hsr_slave_0: entered promiscuous mode [ 80.757624][ T6485] hsr_slave_1: entered promiscuous mode [ 80.767612][ T6485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.775161][ T6485] Cannot create hsr debugfs directory [ 80.925866][ T6485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.038652][ T6485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.066174][ T6732] chnl_net:caif_netlink_parms(): no params data found [ 81.118665][ T6485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.176305][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.183423][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.208066][ T6732] bridge_slave_0: entered allmulticast mode [ 81.214555][ T6732] bridge_slave_0: entered promiscuous mode [ 81.232334][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.239473][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.267816][ T6732] bridge_slave_1: entered allmulticast mode [ 81.287878][ T6732] bridge_slave_1: entered promiscuous mode [ 81.309699][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.328593][ T6485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.384571][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.406980][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.447689][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.460583][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.478944][ T6485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.528681][ T6485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.547469][ T6485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.568210][ T6732] team0: Port device team_slave_0 added [ 81.574919][ T6732] team0: Port device team_slave_1 added [ 81.592506][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.618344][ T6485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.644841][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.651899][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.678059][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.699524][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.706576][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.732511][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.791232][ T6732] hsr_slave_0: entered promiscuous mode [ 81.808361][ T6732] hsr_slave_1: entered promiscuous mode [ 81.817960][ T6732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.825513][ T6732] Cannot create hsr debugfs directory [ 81.871373][ T11] bridge_slave_1: left allmulticast mode [ 81.877062][ T11] bridge_slave_1: left promiscuous mode [ 81.882808][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.909392][ T11] bridge_slave_0: left allmulticast mode [ 81.915057][ T11] bridge_slave_0: left promiscuous mode [ 81.920766][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.099686][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.113420][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.123816][ T11] bond0 (unregistering): Released all slaves [ 82.204071][ T6485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.280271][ T11] hsr_slave_0: left promiscuous mode [ 82.297009][ T11] hsr_slave_1: left promiscuous mode [ 82.302920][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.310502][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.329583][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.337094][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.367545][ T11] veth1_macvtap: left promiscuous mode [ 82.373040][ T11] veth0_macvtap: left promiscuous mode [ 82.378724][ T11] veth1_vlan: left promiscuous mode [ 82.384011][ T11] veth0_vlan: left promiscuous mode [ 82.505461][ T11] team0 (unregistering): Port device team_slave_1 removed [ 82.517762][ T11] team0 (unregistering): Port device team_slave_0 removed [ 82.588356][ T6732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.621261][ T7290] loop3: detected capacity change from 0 to 1024 [ 82.633259][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 82.660051][ T6485] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.684798][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.691933][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.700464][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.707575][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.716292][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.739841][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.746931][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.755702][ T6990] bridge_slave_0: entered allmulticast mode [ 82.762359][ T6990] bridge_slave_0: entered promiscuous mode [ 82.771065][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.778229][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.795524][ T6990] bridge_slave_1: entered allmulticast mode [ 82.802819][ T6990] bridge_slave_1: entered promiscuous mode [ 82.837395][ T6732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.854437][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.903525][ T6732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.953661][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.010728][ T6732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.030907][ T6990] team0: Port device team_slave_0 added [ 83.039186][ T6990] team0: Port device team_slave_1 added [ 83.055680][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.062802][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.088753][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.100306][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.107350][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.133557][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.146844][ T6485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.174656][ T6990] hsr_slave_0: entered promiscuous mode [ 83.180930][ T6990] hsr_slave_1: entered promiscuous mode [ 83.186866][ T6990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.194934][ T6990] Cannot create hsr debugfs directory [ 83.244618][ T6732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.253755][ T6732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.272052][ T6732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.283100][ T6732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.310449][ T11] bridge_slave_1: left allmulticast mode [ 83.316115][ T11] bridge_slave_1: left promiscuous mode [ 83.321784][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.329889][ T11] bridge_slave_0: left allmulticast mode [ 83.335628][ T11] bridge_slave_0: left promiscuous mode [ 83.341538][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.349789][ T11] bridge_slave_1: left allmulticast mode [ 83.355425][ T11] bridge_slave_1: left promiscuous mode [ 83.361074][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.369001][ T11] bridge_slave_0: left allmulticast mode [ 83.374639][ T11] bridge_slave_0: left promiscuous mode [ 83.380326][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.474667][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 83.474682][ T29] audit: type=1326 audit(1718262470.977:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.505016][ T29] audit: type=1326 audit(1718262470.977:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.529210][ T29] audit: type=1326 audit(1718262470.977:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.553526][ T29] audit: type=1326 audit(1718262470.977:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.577538][ T29] audit: type=1326 audit(1718262470.977:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.601435][ T29] audit: type=1326 audit(1718262470.977:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.625430][ T29] audit: type=1326 audit(1718262470.977:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.649348][ T29] audit: type=1326 audit(1718262470.977:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.673504][ T29] audit: type=1326 audit(1718262470.977:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.697482][ T29] audit: type=1326 audit(1718262470.977:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2064664ea9 code=0x7fc00000 [ 83.731976][ T7528] loop4: detected capacity change from 0 to 764 [ 83.740588][ T7528] Symlink component flag not implemented [ 83.746457][ T7528] Symlink component flag not implemented (129) [ 83.803986][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.819400][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.830986][ T11] bond0 (unregistering): Released all slaves [ 83.837134][ T7534] loop4: detected capacity change from 0 to 512 [ 83.843719][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.854396][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.864606][ T7534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.864795][ T11] bond0 (unregistering): Released all slaves [ 83.878344][ T7534] ext4 filesystem being mounted at /root/syzkaller-testdir3279482081/syzkaller.9e7hxI/148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.914015][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.931890][ T6485] veth0_vlan: entered promiscuous mode [ 83.949248][ T6485] veth1_vlan: entered promiscuous mode [ 83.970274][ T6485] veth0_macvtap: entered promiscuous mode [ 83.977169][ T6485] veth1_macvtap: entered promiscuous mode [ 84.000438][ T6732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.007544][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.018002][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.027810][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.038329][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.048171][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.058642][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.068484][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.079084][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.090962][ T6485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.104565][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.115033][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.125097][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.135518][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.145872][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.156375][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.166276][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.176702][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.187218][ T6485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.196836][ T6732] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.214163][ T11] hsr_slave_0: left promiscuous mode [ 84.221108][ T11] hsr_slave_1: left promiscuous mode [ 84.224779][ T7555] loop3: detected capacity change from 0 to 256 [ 84.233131][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.240674][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.248455][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.255911][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.266348][ T11] hsr_slave_0: left promiscuous mode [ 84.272574][ T11] hsr_slave_1: left promiscuous mode [ 84.278408][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.285830][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.293566][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.301184][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.312628][ T11] veth1_macvtap: left promiscuous mode [ 84.318238][ T11] veth0_macvtap: left promiscuous mode [ 84.323701][ T11] veth1_vlan: left promiscuous mode [ 84.329039][ T11] veth0_vlan: left promiscuous mode [ 84.334907][ T11] veth1_macvtap: left promiscuous mode [ 84.340446][ T11] veth0_macvtap: left promiscuous mode [ 84.345944][ T11] veth1_vlan: left promiscuous mode [ 84.351247][ T11] veth0_vlan: left promiscuous mode [ 84.426652][ T7566] dccp_invalid_packet: P.Data Offset(0) too small [ 84.466124][ T11] team0 (unregistering): Port device team_slave_1 removed [ 84.477092][ T11] team0 (unregistering): Port device team_slave_0 removed [ 84.533248][ T11] team0 (unregistering): Port device team_slave_1 removed [ 84.543272][ T11] team0 (unregistering): Port device team_slave_0 removed [ 84.580986][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.588195][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.599405][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.606521][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.616419][ T6485] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.625368][ T6485] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.634180][ T6485] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.642926][ T6485] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.667099][ T3101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.690864][ T6990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.700070][ T6990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.713642][ T6732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.726654][ T6990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.736685][ T6990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.940980][ T6732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.958691][ T7597] bridge0: port 3(vlan2) entered blocking state [ 84.965026][ T7597] bridge0: port 3(vlan2) entered disabled state [ 84.985890][ T7597] vlan2: entered allmulticast mode [ 84.999366][ T7597] vlan2: left allmulticast mode [ 85.049507][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.084346][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.118698][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.125889][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.181718][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.188839][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.287196][ T6732] veth0_vlan: entered promiscuous mode [ 85.484373][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.503214][ T6732] veth1_vlan: entered promiscuous mode [ 85.592865][ T6732] veth0_macvtap: entered promiscuous mode [ 85.605963][ T6732] veth1_macvtap: entered promiscuous mode [ 85.631772][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.642291][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.652124][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.662754][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.672643][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.683200][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.694832][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.703173][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.713732][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.723598][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.734121][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.744053][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.754512][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.765611][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.791748][ T6732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.800548][ T6732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.809560][ T6732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.818461][ T6732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.875408][ T6990] veth0_vlan: entered promiscuous mode [ 85.899898][ T6990] veth1_vlan: entered promiscuous mode [ 85.936519][ T7634] loop1: detected capacity change from 0 to 256 [ 85.938367][ T6990] veth0_macvtap: entered promiscuous mode [ 85.951008][ T6990] veth1_macvtap: entered promiscuous mode [ 85.963024][ T7634] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.963450][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.983623][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.987644][ T7634] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.993450][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.013903][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.023752][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.034363][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.044308][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.054798][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.066590][ T6732] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 86.068242][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.085132][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.090871][ T6732] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 86.095585][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.095598][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.095609][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.095620][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.144166][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.154182][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.164610][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.178953][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.208623][ T6990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.217468][ T6990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.226236][ T6990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.235169][ T6990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.381411][ T7643] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 86.474572][ T7647] loop3: detected capacity change from 0 to 512 [ 86.521101][ T7647] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 86.568809][ T7647] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: iget: bad i_size value: -67835469387268086 [ 86.607317][ T7647] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 86.621052][ T7647] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.641330][ T7647] ext2 filesystem being mounted at /root/syzkaller-testdir1016762908/syzkaller.YWR6af/25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.671882][ T7651] loop0: detected capacity change from 0 to 1024 [ 86.739546][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.749959][ T7647] usb usb8: usbfs: process 7647 (syz-executor.3) did not claim interface 0 before use [ 86.787386][ T5056] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 87.092725][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.279588][ T7670] loop4: detected capacity change from 0 to 1024 [ 87.287144][ T7670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.294756][ T7670] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.305052][ T7670] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz-executor.4: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 87.324023][ T7670] EXT4-fs error (device loop4): ext4_quota_enable:7037: comm syz-executor.4: Bad quota inode: 3, type: 0 [ 87.336235][ T7670] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 87.359579][ T7670] EXT4-fs (loop4): mount failed [ 87.407141][ T7680] can: request_module (can-proto-0) failed. [ 87.475237][ T7691] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 87.532525][ T7699] loop2: detected capacity change from 0 to 512 [ 87.540496][ T7699] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 87.549769][ T7699] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: iget: bad i_size value: -67835469387268086 [ 87.563442][ T7699] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 87.576950][ T7699] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.585618][ T7703] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 87.591128][ T7699] ext2 filesystem being mounted at /root/syzkaller-testdir3590047886/syzkaller.QbJnxa/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.614293][ T7703] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.623660][ T7704] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.660677][ T7699] usb usb8: usbfs: process 7699 (syz-executor.2) did not claim interface 0 before use [ 87.684964][ T6485] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 88.066231][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.380058][ T7733] can: request_module (can-proto-0) failed. [ 88.497936][ T7718] chnl_net:caif_netlink_parms(): no params data found [ 88.594757][ T7874] loop3: detected capacity change from 0 to 256 [ 88.616116][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.623752][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.645263][ T7874] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.665856][ T7718] bridge_slave_0: entered allmulticast mode [ 88.672741][ T7874] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 88.688941][ T7718] bridge_slave_0: entered promiscuous mode [ 88.706149][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.713271][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.732813][ T7718] bridge_slave_1: entered allmulticast mode [ 88.739973][ T5056] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 88.748055][ T7718] bridge_slave_1: entered promiscuous mode [ 88.759643][ T5056] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 88.789323][ T7718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.815558][ T7718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.846660][ T7718] team0: Port device team_slave_0 added [ 88.854035][ T7718] team0: Port device team_slave_1 added [ 88.873138][ T7718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.880631][ T7718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.906584][ T7718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.918195][ T7718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.925206][ T7718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.951291][ T7718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.991830][ T7718] hsr_slave_0: entered promiscuous mode [ 89.007123][ T7718] hsr_slave_1: entered promiscuous mode [ 89.061304][ T8013] loop4: detected capacity change from 0 to 512 [ 89.090777][ T8013] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 89.118689][ T8013] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 89.153589][ T8013] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 89.166320][ T8013] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.180023][ T8013] ext2 filesystem being mounted at /root/syzkaller-testdir3279482081/syzkaller.9e7hxI/153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.293573][ T8013] usb usb8: usbfs: process 8013 (syz-executor.4) did not claim interface 0 before use [ 89.323745][ T3101] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 89.353889][ T8068] loop0: detected capacity change from 0 to 512 [ 89.400558][ T8068] loop0: detected capacity change from 0 to 512 [ 89.431187][ T8080] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 89.450772][ T8068] loop0: detected capacity change from 0 to 512 [ 89.511086][ T8068] loop0: detected capacity change from 0 to 512 [ 89.528510][ T8063] chnl_net:caif_netlink_parms(): no params data found [ 89.550479][ T8068] loop0: detected capacity change from 0 to 512 [ 89.610688][ T8068] loop0: detected capacity change from 0 to 512 [ 89.636363][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.643577][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.662495][ T8063] bridge_slave_0: entered allmulticast mode [ 89.669756][ T8063] bridge_slave_0: entered promiscuous mode [ 89.680598][ T8068] loop0: detected capacity change from 0 to 512 [ 89.693235][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.700378][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.716097][ T8063] bridge_slave_1: entered allmulticast mode [ 89.722698][ T8063] bridge_slave_1: entered promiscuous mode [ 89.740562][ T8068] loop0: detected capacity change from 0 to 512 [ 89.763412][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.778652][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.797448][ T8068] loop0: detected capacity change from 0 to 512 [ 89.820118][ T8063] team0: Port device team_slave_0 added [ 89.823161][ T8249] can: request_module (can-proto-0) failed. [ 89.833577][ T8063] team0: Port device team_slave_1 added [ 89.843819][ T8068] loop0: detected capacity change from 0 to 512 [ 89.864204][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.871199][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.897169][ T8063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.910758][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.913675][ T8338] loop2: detected capacity change from 0 to 256 [ 89.917901][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.950006][ T8063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.958467][ T8338] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 89.972693][ T8338] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 89.976382][ T8068] loop0: detected capacity change from 0 to 512 [ 89.990561][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.991397][ T6485] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 90.020197][ T6485] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 90.021697][ T8353] loop4: detected capacity change from 0 to 256 [ 90.049279][ T8353] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.050688][ T8068] loop0: detected capacity change from 0 to 512 [ 90.059908][ T8353] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 90.087634][ T8063] hsr_slave_0: entered promiscuous mode [ 90.094064][ T8063] hsr_slave_1: entered promiscuous mode [ 90.094389][ T3101] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 90.103663][ T8068] loop0: detected capacity change from 0 to 512 [ 90.107618][ T3101] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 90.122272][ T8063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.130079][ T8063] Cannot create hsr debugfs directory [ 90.138825][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.163701][ T8068] loop0: detected capacity change from 0 to 512 [ 90.200658][ T8068] loop0: detected capacity change from 0 to 512 [ 90.211009][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.339977][ T11] bridge_slave_1: left allmulticast mode [ 90.345635][ T11] bridge_slave_1: left promiscuous mode [ 90.351508][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.379585][ T11] bridge_slave_0: left allmulticast mode [ 90.385249][ T11] bridge_slave_0: left promiscuous mode [ 90.391116][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.621417][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.632217][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.643881][ T11] bond0 (unregistering): Released all slaves [ 90.804878][ T11] hsr_slave_0: left promiscuous mode [ 90.811910][ T11] hsr_slave_1: left promiscuous mode [ 90.817852][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.825274][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.833088][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.840615][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.851117][ T11] veth1_macvtap: left promiscuous mode [ 90.856624][ T11] veth0_macvtap: left promiscuous mode [ 90.862474][ T11] veth1_vlan: left promiscuous mode [ 90.867739][ T11] veth0_vlan: left promiscuous mode [ 90.965246][ T11] team0 (unregistering): Port device team_slave_1 removed [ 90.978315][ T11] team0 (unregistering): Port device team_slave_0 removed [ 91.086132][ T8463] chnl_net:caif_netlink_parms(): no params data found [ 91.105541][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 91.162262][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.169479][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.180149][ T8463] bridge_slave_0: entered allmulticast mode [ 91.186713][ T8463] bridge_slave_0: entered promiscuous mode [ 91.194398][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.201592][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.210128][ T8463] bridge_slave_1: entered allmulticast mode [ 91.216616][ T8463] bridge_slave_1: entered promiscuous mode [ 91.266536][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.279886][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.286969][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.296920][ T8459] bridge_slave_0: entered allmulticast mode [ 91.303550][ T8459] bridge_slave_0: entered promiscuous mode [ 91.314964][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.332942][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.340349][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.349372][ T8459] bridge_slave_1: entered allmulticast mode [ 91.355969][ T8459] bridge_slave_1: entered promiscuous mode [ 91.378384][ T8829] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 91.390687][ T8063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.402634][ T7718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.423992][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.434182][ T8463] team0: Port device team_slave_0 added [ 91.442140][ T7718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.452311][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.461753][ T7718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.474835][ T8063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.486454][ T8463] team0: Port device team_slave_1 added [ 91.508994][ T7718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.532863][ T8459] team0: Port device team_slave_0 added [ 91.545184][ T8063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.556812][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.563830][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.590028][ T8463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.602285][ T8459] team0: Port device team_slave_1 added [ 91.615955][ T8463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.623032][ T8463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.649085][ T8463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.671618][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.678642][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.683614][ T8957] loop0: detected capacity change from 0 to 1024 [ 91.704623][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.729877][ T8063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.740957][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.748124][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.774024][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.792356][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.803540][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.837102][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 91.837115][ T29] audit: type=1326 audit(1718262479.337:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7fc00000 [ 91.870513][ T8459] hsr_slave_0: entered promiscuous mode [ 91.876881][ T8459] hsr_slave_1: entered promiscuous mode [ 91.882813][ T8459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.890420][ T8459] Cannot create hsr debugfs directory [ 91.899812][ T8463] hsr_slave_0: entered promiscuous mode [ 91.905831][ T8463] hsr_slave_1: entered promiscuous mode [ 91.912002][ T8463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.919697][ T8463] Cannot create hsr debugfs directory [ 91.928306][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.002736][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.016818][ T8063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.038846][ T8063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.061088][ T8063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.070648][ T8063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.083820][ T7718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.106553][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.151095][ T8459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.186161][ T7718] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.190666][ T29] audit: type=1400 audit(1718262479.697:1339): avc: denied { create } for pid=9155 comm="syz-executor.0" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 92.216831][ T29] audit: type=1400 audit(1718262479.727:1340): avc: denied { read } for pid=9155 comm="syz-executor.0" name="file2" dev="sda1" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 92.239778][ T29] audit: type=1400 audit(1718262479.727:1341): avc: denied { open } for pid=9155 comm="syz-executor.0" path="/root/syzkaller-testdir2699120837/syzkaller.3EFsWl/12/file2" dev="sda1" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 92.267402][ T29] audit: type=1400 audit(1718262479.727:1342): avc: denied { ioctl } for pid=9155 comm="syz-executor.0" path="/root/syzkaller-testdir2699120837/syzkaller.3EFsWl/12/file2" dev="sda1" ino=1940 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 92.299189][ T29] audit: type=1326 audit(1718262479.807:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 92.324801][ T29] audit: type=1326 audit(1718262479.807:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 92.348788][ T29] audit: type=1326 audit(1718262479.807:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 92.372620][ T29] audit: type=1326 audit(1718262479.807:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 92.398267][ T29] audit: type=1326 audit(1718262479.827:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 92.399880][ T8459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.439681][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.462684][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.469756][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.487985][ T8063] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.503225][ T8459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.515820][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.522959][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.538608][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.545684][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.558848][ T8459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.574949][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.582011][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.611479][ T7718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.622013][ T7718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.670175][ T11] bridge_slave_1: left allmulticast mode [ 92.675840][ T11] bridge_slave_1: left promiscuous mode [ 92.681645][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.700726][ T11] bridge_slave_0: left allmulticast mode [ 92.706427][ T11] bridge_slave_0: left promiscuous mode [ 92.712174][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.721641][ T11] bridge_slave_1: left allmulticast mode [ 92.727306][ T11] bridge_slave_1: left promiscuous mode [ 92.733213][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.741598][ T11] bridge_slave_0: left allmulticast mode [ 92.747271][ T11] bridge_slave_0: left promiscuous mode [ 92.753081][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.761281][ T11] bridge_slave_1: left allmulticast mode [ 92.769470][ T11] bridge_slave_1: left promiscuous mode [ 92.775783][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.785093][ T11] bridge_slave_0: left allmulticast mode [ 92.790882][ T11] bridge_slave_0: left promiscuous mode [ 92.796572][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.170889][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.184549][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.196195][ T11] bond0 (unregistering): Released all slaves [ 93.208446][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.221995][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.233382][ T11] bond0 (unregistering): Released all slaves [ 93.245724][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.259789][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.270841][ T11] bond0 (unregistering): Released all slaves [ 93.294787][ T9202] bridge0: port 3(vlan2) entered blocking state [ 93.301216][ T9202] bridge0: port 3(vlan2) entered disabled state [ 93.309215][ T9202] vlan2: entered allmulticast mode [ 93.413502][ T9202] vlan2: left allmulticast mode [ 93.434824][ T8459] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.445755][ T8459] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.455155][ T8459] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.465736][ T8459] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.483593][ T7718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.494840][ T8063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.502372][ T9218] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 93.554954][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.586935][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.602146][ T11] hsr_slave_0: left promiscuous mode [ 93.613897][ T11] hsr_slave_1: left promiscuous mode [ 93.626862][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.634396][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.642018][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.649513][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.661369][ T11] hsr_slave_0: left promiscuous mode [ 93.667144][ T11] hsr_slave_1: left promiscuous mode [ 93.672838][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.680276][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.690592][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.698089][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.707171][ T11] hsr_slave_0: left promiscuous mode [ 93.714318][ T11] hsr_slave_1: left promiscuous mode [ 93.720106][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.727600][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.736697][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.744202][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.762361][ T11] veth1_macvtap: left promiscuous mode [ 93.768018][ T11] veth0_macvtap: left promiscuous mode [ 93.773541][ T11] veth1_vlan: left promiscuous mode [ 93.778853][ T11] veth0_vlan: left promiscuous mode [ 93.784747][ T11] veth1_macvtap: left promiscuous mode [ 93.790315][ T11] veth0_macvtap: left promiscuous mode [ 93.795815][ T11] veth1_vlan: left promiscuous mode [ 93.801084][ T11] veth0_vlan: left promiscuous mode [ 93.818434][ T11] veth1_macvtap: left promiscuous mode [ 93.823924][ T11] veth0_macvtap: left promiscuous mode [ 93.829490][ T11] veth1_vlan: left promiscuous mode [ 93.834781][ T11] veth0_vlan: left promiscuous mode [ 94.027049][ T11] team0 (unregistering): Port device team_slave_1 removed [ 94.038888][ T11] team0 (unregistering): Port device team_slave_0 removed [ 94.112814][ T11] team0 (unregistering): Port device team_slave_1 removed [ 94.125126][ T11] team0 (unregistering): Port device team_slave_0 removed [ 94.207697][ T11] team0 (unregistering): Port device team_slave_1 removed [ 94.222216][ T11] team0 (unregistering): Port device team_slave_0 removed [ 94.272300][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.279463][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.308311][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.315493][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.345154][ T8063] veth0_vlan: entered promiscuous mode [ 94.365939][ T8063] veth1_vlan: entered promiscuous mode [ 94.390572][ T8459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.401120][ T8459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.418617][ T7718] veth0_vlan: entered promiscuous mode [ 94.440958][ T8063] veth0_macvtap: entered promiscuous mode [ 94.469612][ T7718] veth1_vlan: entered promiscuous mode [ 94.476030][ T8463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.486348][ T8063] veth1_macvtap: entered promiscuous mode [ 94.498621][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.509135][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.522393][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.538384][ T8463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.550039][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.560506][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.575047][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.589963][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.601134][ T8463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.612107][ T8463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.628005][ T8063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.636848][ T8063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.645703][ T8063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.654473][ T8063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.673702][ T7718] veth0_macvtap: entered promiscuous mode [ 94.704453][ T7718] veth1_macvtap: entered promiscuous mode [ 94.734909][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.745427][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.755294][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.765744][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.777057][ T7718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.798743][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.809275][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.819448][ T7718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.830016][ T7718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.842819][ T7718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.862406][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.872540][ T8459] veth0_vlan: entered promiscuous mode [ 94.882591][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.891783][ T7718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.900611][ T7718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.909324][ T7718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.918222][ T7718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.935179][ T8459] veth1_vlan: entered promiscuous mode [ 94.961449][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.968561][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.985817][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.992752][ T9275] loop3: detected capacity change from 0 to 1024 [ 94.992939][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.037073][ T8459] veth0_macvtap: entered promiscuous mode [ 95.045791][ T8463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.056444][ T8463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.075238][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.093353][ T8459] veth1_macvtap: entered promiscuous mode [ 95.133655][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.144150][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.154096][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.164570][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.174619][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.185077][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.208263][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.216800][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.227370][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.237183][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.247666][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.257553][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.268005][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.278996][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.292577][ T8459] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.301443][ T8459] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.310340][ T8459] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.319148][ T8459] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.357083][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.368943][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.542291][ T8463] veth0_vlan: entered promiscuous mode [ 95.560723][ T8463] veth1_vlan: entered promiscuous mode [ 95.591483][ T8463] veth0_macvtap: entered promiscuous mode [ 95.599621][ T8463] veth1_macvtap: entered promiscuous mode [ 95.613486][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.624073][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.633904][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.644345][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.654277][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.664817][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.674689][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.685175][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.706031][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.715558][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.726026][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.736152][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.746752][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.756674][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.767200][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.777092][ T8463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.787659][ T8463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.800718][ T8463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.815893][ T8463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.824742][ T8463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.833586][ T8463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.842413][ T8463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.937861][ T9347] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 95.973020][ T9347] loop4: detected capacity change from 0 to 512 [ 96.070773][ T9352] bridge0: port 3(vlan2) entered blocking state [ 96.077177][ T9352] bridge0: port 3(vlan2) entered disabled state [ 96.096080][ T9352] vlan2: entered allmulticast mode [ 96.144362][ T9352] vlan2: left allmulticast mode [ 96.186468][ T9361] loop4: detected capacity change from 0 to 512 [ 96.214802][ T9361] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 96.280165][ T9361] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 96.308790][ T9361] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 96.378237][ T9361] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.417417][ T9361] ext2 filesystem being mounted at /root/syzkaller-testdir2309049530/syzkaller.0CMhXM/1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.508772][ T9361] usb usb8: usbfs: process 9361 (syz-executor.4) did not claim interface 0 before use [ 96.578229][ T8463] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 96.949051][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 96.949065][ T29] audit: type=1326 audit(1718262484.457:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 96.999255][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.009774][ T29] audit: type=1326 audit(1718262484.487:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.033821][ T29] audit: type=1326 audit(1718262484.487:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.057882][ T29] audit: type=1326 audit(1718262484.487:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.082148][ T29] audit: type=1326 audit(1718262484.487:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.106239][ T29] audit: type=1326 audit(1718262484.487:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.130280][ T29] audit: type=1326 audit(1718262484.487:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.154403][ T29] audit: type=1326 audit(1718262484.487:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.178805][ T29] audit: type=1326 audit(1718262484.487:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.202907][ T29] audit: type=1326 audit(1718262484.487:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9380 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 97.290808][ T9398] loop1: detected capacity change from 0 to 512 [ 97.293732][ T9395] loop3: detected capacity change from 0 to 1024 [ 97.306829][ T9398] /dev/loop1: Can't open blockdev [ 97.320065][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.336005][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.339895][ T9397] loop1: detected capacity change from 0 to 512 [ 97.356165][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.387168][ T9397] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.402370][ T9397] EXT4-fs (loop1): 1 orphan inode deleted [ 97.408167][ T9397] EXT4-fs (loop1): 1 truncate cleaned up [ 97.414335][ T9397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.606814][ T9415] bridge0: port 3(vlan2) entered blocking state [ 97.613163][ T9415] bridge0: port 3(vlan2) entered disabled state [ 97.626869][ T9415] vlan2: entered allmulticast mode [ 97.653975][ T9415] vlan2: left allmulticast mode [ 97.660435][ T7718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.546819][ T9435] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 98.628541][ T9433] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 98.671516][ T9440] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 98.679783][ T9440] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.689086][ T9440] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 98.697145][ T9440] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.769432][ T9440] 9pnet_fd: Insufficient options for proto=fd [ 98.788630][ T9448] block device autoloading is deprecated and will be removed. [ 98.809972][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.902393][ T9462] loop4: detected capacity change from 0 to 256 [ 99.095719][ T9478] bridge0: port 3(vlan2) entered blocking state [ 99.102371][ T9478] bridge0: port 3(vlan2) entered disabled state [ 99.138070][ T9478] vlan2: entered allmulticast mode [ 99.214649][ T9478] vlan2: left allmulticast mode [ 100.083547][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.160903][ T9528] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 100.248825][ T9533] loop0: detected capacity change from 0 to 512 [ 100.272066][ T9533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.297471][ T9533] ext4 filesystem being mounted at /root/syzkaller-testdir2699120837/syzkaller.3EFsWl/34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.354627][ T9538] loop1: detected capacity change from 0 to 512 [ 100.389068][ T9538] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 100.429837][ T9538] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: iget: bad i_size value: -67835469387268086 [ 100.447840][ T9538] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 100.460705][ T9538] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.460793][ T9538] ext2 filesystem being mounted at /root/syzkaller-testdir707481966/syzkaller.IiFnwc/14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.497707][ T9538] usb usb8: usbfs: process 9538 (syz-executor.1) did not claim interface 0 before use [ 100.593556][ T7718] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 100.756166][ T9550] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 100.764385][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.928805][ T9551] bridge0: port 3(vlan2) entered blocking state [ 100.935137][ T9551] bridge0: port 3(vlan2) entered disabled state [ 100.963533][ T9551] vlan2: entered allmulticast mode [ 100.986173][ T9551] vlan2: left allmulticast mode [ 101.108771][ T6990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.582303][ T9590] loop0: detected capacity change from 0 to 512 [ 101.607936][ T9590] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 101.631979][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.799750][ T9590] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: iget: bad i_size value: -67835469387268086 [ 101.917518][ T9590] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 101.978650][ T9590] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.001160][ T9590] ext2 filesystem being mounted at /root/syzkaller-testdir2699120837/syzkaller.3EFsWl/39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.067792][ T9600] syzkaller1: entered promiscuous mode [ 102.073308][ T9600] syzkaller1: entered allmulticast mode [ 102.116568][ T9608] loop1: detected capacity change from 0 to 512 [ 102.124343][ T9590] usb usb8: usbfs: process 9590 (syz-executor.0) did not claim interface 0 before use [ 102.157393][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 102.157408][ T29] audit: type=1400 audit(1718262489.657:1549): avc: denied { create } for pid=9588 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.184251][ T29] audit: type=1400 audit(1718262489.657:1550): avc: denied { write } for pid=9588 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.204782][ T29] audit: type=1400 audit(1718262489.657:1551): avc: denied { nlmsg_write } for pid=9588 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.240184][ T9608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.254060][ T9608] ext4 filesystem being mounted at /root/syzkaller-testdir707481966/syzkaller.IiFnwc/17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.292949][ T6990] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 102.328900][ T29] audit: type=1400 audit(1718262489.827:1552): avc: denied { map } for pid=9607 comm="syz-executor.1" path="socket:[18928]" dev="sockfs" ino=18928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.329904][ T9608] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 102.360996][ T9608] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 102.439722][ T7718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.627070][ T9650] loop1: detected capacity change from 0 to 512 [ 102.648800][ T9650] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 102.680720][ T9650] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: iget: bad i_size value: -67835469387268086 [ 102.694594][ T9650] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 102.712650][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.732286][ T9650] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.747020][ T9668] 9pnet_fd: Insufficient options for proto=fd [ 102.754947][ T9650] ext2 filesystem being mounted at /root/syzkaller-testdir707481966/syzkaller.IiFnwc/19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.776185][ T9670] loop0: detected capacity change from 0 to 256 [ 102.778825][ T29] audit: type=1400 audit(1718262490.277:1553): avc: denied { write } for pid=9665 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.802475][ T29] audit: type=1400 audit(1718262490.277:1554): avc: denied { ioctl } for pid=9665 comm="syz-executor.3" path="socket:[18205]" dev="sockfs" ino=18205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.877686][ T9650] usb usb8: usbfs: process 9650 (syz-executor.1) did not claim interface 0 before use [ 103.185070][ T7718] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 103.605933][ T9702] loop1: detected capacity change from 0 to 2048 [ 103.645484][ T9702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.688811][ T7718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.718504][ T35] IPVS: starting estimator thread 0... [ 103.747845][ T9707] loop3: detected capacity change from 0 to 512 [ 103.757274][ T9707] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz-executor.3: Invalid inode bitmap blk 4 in block_group 0 [ 103.785555][ T9707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.828521][ T9708] IPVS: using max 2784 ests per chain, 139200 per kthread [ 103.845845][ T8063] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.897167][ T29] audit: type=1400 audit(1718262491.397:1555): avc: denied { write } for pid=9727 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.971003][ T9736] loop0: detected capacity change from 0 to 512 [ 103.991618][ T9736] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 104.008990][ T9736] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: iget: bad i_size value: -67835469387268086 [ 104.022913][ T9736] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 104.040702][ T9736] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.063501][ T9736] ext2 filesystem being mounted at /root/syzkaller-testdir2699120837/syzkaller.3EFsWl/47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.093721][ T9743] loop1: detected capacity change from 0 to 512 [ 104.109972][ T9743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.122641][ T9743] ext4 filesystem being mounted at /root/syzkaller-testdir707481966/syzkaller.IiFnwc/25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.127689][ T9736] usb usb8: usbfs: process 9736 (syz-executor.0) did not claim interface 0 before use [ 104.147187][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.191618][ T6990] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 104.202186][ T9748] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.211017][ T9748] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.219818][ T9748] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.228582][ T9748] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.248079][ T9748] vxlan0: entered promiscuous mode [ 104.255064][ T29] audit: type=1326 audit(1718262491.757:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 104.282365][ T9752] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.282474][ T29] audit: type=1326 audit(1718262491.787:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 104.316021][ T29] audit: type=1326 audit(1718262491.787:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f3d891b6ea9 code=0x7ffc0000 [ 104.341508][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.472825][ T9785] loop0: detected capacity change from 0 to 512 [ 104.488428][ T9785] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 104.500104][ T9785] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 104.510231][ T9785] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 104.544013][ T9787] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.571282][ T9785] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 104.580050][ T9785] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 104.595139][ T9785] EXT4-fs (loop0): Remounting filesystem read-only [ 104.602305][ T9785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.615254][ T9785] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 104.623600][ T9785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.723070][ T9803] loop4: detected capacity change from 0 to 512 [ 104.723182][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.738858][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.738940][ T9803] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 104.756577][ T9804] wireguard0: entered promiscuous mode [ 104.757243][ T9803] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 104.762100][ T9804] wireguard0: entered allmulticast mode [ 104.781328][ T9803] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 104.794106][ T9803] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.806437][ T9803] ext2 filesystem being mounted at /root/syzkaller-testdir2309049530/syzkaller.0CMhXM/29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.857850][ T9803] usb usb8: usbfs: process 9803 (syz-executor.4) did not claim interface 0 before use [ 104.886567][ T8463] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 104.926330][ T7718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.076709][ T9822] loop1: detected capacity change from 0 to 512 [ 105.084608][ T9822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.103167][ T9822] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 105.111464][ T9822] System zones: 1-12 [ 105.116245][ T9822] EXT4-fs (loop1): 1 orphan inode deleted [ 105.122040][ T9822] EXT4-fs (loop1): 1 truncate cleaned up [ 105.128384][ T9822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.148595][ T9822] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 105.163160][ T9822] EXT4-fs (loop1): Remounting filesystem read-only [ 105.211413][ T7718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.251227][ T9832] loop4: detected capacity change from 0 to 256 [ 105.473342][ T9851] loop3: detected capacity change from 0 to 512 [ 105.488971][ T9851] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 105.508238][ T9851] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: iget: bad i_size value: -67835469387268086 [ 105.589824][ T9851] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 105.628554][ T9851] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.643153][ T9860] loop1: detected capacity change from 0 to 512 [ 105.644321][ T9860] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 105.662193][ T9851] ext2 filesystem being mounted at /root/syzkaller-testdir4261826206/syzkaller.C2HvvB/25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.702087][ T9851] usb usb8: usbfs: process 9851 (syz-executor.3) did not claim interface 0 before use [ 105.752282][ T24] IPVS: starting estimator thread 0... [ 105.771424][ T9865] loop4: detected capacity change from 0 to 512 [ 105.789009][ T9865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.801778][ T9865] ext4 filesystem being mounted at /root/syzkaller-testdir2309049530/syzkaller.0CMhXM/34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.827607][ T8063] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 105.837488][ T9869] IPVS: using max 2832 ests per chain, 141600 per kthread [ 105.983850][ T9881] loop1: detected capacity change from 0 to 256 [ 105.992659][ T9883] loop0: detected capacity change from 0 to 512 [ 106.001270][ T9883] EXT4-fs (loop0): #blocks per group too big: 16384 [ 106.143056][ T9909] loop3: detected capacity change from 0 to 128 [ 106.152792][ T9908] loop0: detected capacity change from 0 to 1024 [ 106.200978][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.380065][ T9929] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 106.440780][ T9932] loop1: detected capacity change from 0 to 256 [ 106.476195][ T8463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.518514][ T9937] loop1: detected capacity change from 0 to 1024 [ 106.529352][ T9937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.551808][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.597822][ T7718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.770576][ T9975] loop2: detected capacity change from 0 to 764 [ 106.797974][ T9975] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 107.029774][ T9989] loop3: detected capacity change from 0 to 256 [ 107.174388][T10001] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 107.202079][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 107.202094][ T29] audit: type=1326 audit(1718262494.707:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 107.252333][ T29] audit: type=1326 audit(1718262494.707:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 107.276545][ T29] audit: type=1326 audit(1718262494.747:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 107.300550][ T29] audit: type=1326 audit(1718262494.747:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 107.318857][T10014] netlink: 1940 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.324535][ T29] audit: type=1326 audit(1718262494.747:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 107.358199][ T29] audit: type=1326 audit(1718262494.747:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 107.382456][ T29] audit: type=1326 audit(1718262494.747:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 107.406562][ T29] audit: type=1326 audit(1718262494.747:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb03891627 code=0x7ffc0000 [ 107.430734][ T29] audit: type=1326 audit(1718262494.747:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb03857309 code=0x7ffc0000 [ 107.454739][ T29] audit: type=1326 audit(1718262494.747:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb03891627 code=0x7ffc0000 [ 107.596648][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.696310][T10036] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.722792][T10038] loop4: detected capacity change from 0 to 764 [ 107.731972][T10038] Symlink component flag not implemented [ 107.737742][T10038] Symlink component flag not implemented (129) [ 107.797041][T10042] loop4: detected capacity change from 0 to 256 [ 107.947809][T10053] loop1: detected capacity change from 0 to 1024 [ 108.012301][T10053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.038109][T10053] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2786: inode #12: comm syz-executor.1: corrupted in-inode xattr: bad magic number in in-inode xattr [ 108.125312][T10060] __nla_validate_parse: 1 callbacks suppressed [ 108.125389][T10060] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.247365][ T7718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.415695][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.646496][T10100] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 108.778593][T10109] loop4: detected capacity change from 0 to 512 [ 108.793930][T10112] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.805292][T10109] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 108.833898][T10109] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 108.871853][T10109] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 108.899057][T10109] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.937935][T10109] ext2 filesystem being mounted at /root/syzkaller-testdir2309049530/syzkaller.0CMhXM/46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.038329][T10109] usb usb8: usbfs: process 10109 (syz-executor.4) did not claim interface 0 before use [ 109.114046][ T8463] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 109.361171][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.393171][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.592013][T10163] loop4: detected capacity change from 0 to 512 [ 109.612796][T10163] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 109.641611][T10163] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 109.673226][T10163] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 109.697848][T10167] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 109.736479][T10163] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.760948][T10163] ext2 filesystem being mounted at /root/syzkaller-testdir2309049530/syzkaller.0CMhXM/52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.870771][T10163] usb usb8: usbfs: process 10163 (syz-executor.4) did not claim interface 0 before use [ 109.917664][ T8463] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 110.230001][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.316816][T10206] mmap: syz-executor.2 (10206) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.759593][T10229] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 110.769140][T10226] loop1: detected capacity change from 0 to 512 [ 110.791411][T10226] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 110.887498][T10226] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: iget: bad i_size value: -67835469387268086 [ 110.901288][T10226] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 110.913974][T10226] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.926191][T10226] ext2 filesystem being mounted at /root/syzkaller-testdir707481966/syzkaller.IiFnwc/53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.978533][T10226] usb usb8: usbfs: process 10226 (syz-executor.1) did not claim interface 0 before use [ 111.033393][ T7718] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 111.066024][T10236] loop0: detected capacity change from 0 to 256 [ 111.088233][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.097670][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.147370][T10244] loop1: detected capacity change from 0 to 512 [ 111.176075][T10244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.191716][T10257] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.200626][T10244] ext4 filesystem being mounted at /root/syzkaller-testdir707481966/syzkaller.IiFnwc/54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.227603][ T7718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.239847][T10257] serio: Serial port pts1 [ 111.250166][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.309475][T10268] tmpfs: Bad value for 'mpol' [ 111.315765][T10268] bond_slave_0: entered promiscuous mode [ 111.321472][T10268] bond_slave_1: entered promiscuous mode [ 111.332336][T10268] bond_slave_0: left promiscuous mode [ 111.337938][T10268] bond_slave_1: left promiscuous mode [ 111.372625][T10268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.391513][T10268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.407969][T10268] bond0 (unregistering): Released all slaves [ 111.481978][T10312] loop4: detected capacity change from 0 to 512 [ 111.500194][T10312] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 111.519074][T10312] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 111.537012][T10312] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 111.551283][T10312] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.563813][T10312] ext2 filesystem being mounted at /root/syzkaller-testdir2309049530/syzkaller.0CMhXM/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.629355][T10312] usb usb8: usbfs: process 10312 (syz-executor.4) did not claim interface 0 before use [ 111.822642][ T8463] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 112.288695][T10356] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 112.522354][T10368] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.550650][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 112.550662][ T29] audit: type=1400 audit(1718262500.057:1734): avc: denied { connect } for pid=10367 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.600493][ T29] audit: type=1400 audit(1718262500.087:1735): avc: denied { ioctl } for pid=10367 comm="syz-executor.2" path="socket:[20237]" dev="sockfs" ino=20237 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.694181][ T29] audit: type=1326 audit(1718262500.197:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 112.751303][ T29] audit: type=1326 audit(1718262500.197:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 112.775464][ T29] audit: type=1326 audit(1718262500.197:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 112.799582][ T29] audit: type=1400 audit(1718262500.247:1739): avc: denied { relabelfrom } for pid=10372 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.819888][ T29] audit: type=1400 audit(1718262500.247:1740): avc: denied { relabelto } for pid=10372 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.840070][ T29] audit: type=1326 audit(1718262500.247:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 112.864071][ T29] audit: type=1326 audit(1718262500.247:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 112.888254][ T29] audit: type=1326 audit(1718262500.257:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb03893ea9 code=0x7ffc0000 [ 112.930923][T10387] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 112.937465][T10387] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.945104][T10387] vhci_hcd vhci_hcd.0: Device attached [ 113.019945][T10391] vhci_hcd: connection closed [ 113.020210][ T6154] vhci_hcd: stop threads [ 113.029170][ T6154] vhci_hcd: release socket [ 113.033595][ T6154] vhci_hcd: disconnect device [ 113.108847][T10412] xt_CHECKSUM: unsupported CHECKSUM operation 2 [ 113.127159][T10412] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 113.135382][T10412] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 113.158231][T10412] __nla_validate_parse: 5 callbacks suppressed [ 113.158249][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.352111][T10440] loop4: detected capacity change from 0 to 512 [ 113.376240][T10440] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 113.405057][T10440] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: iget: bad i_size value: -67835469387268086 [ 113.440486][T10440] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 113.480456][T10440] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.522717][T10440] ext2 filesystem being mounted at /root/syzkaller-testdir2309049530/syzkaller.0CMhXM/70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.609483][T10440] usb usb8: usbfs: process 10440 (syz-executor.4) did not claim interface 0 before use [ 113.657598][ T8463] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 113.768849][T10487] xt_CHECKSUM: unsupported CHECKSUM operation 2 [ 113.804623][T10487] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 113.812764][T10487] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 113.847375][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.957523][T10512] loop3: detected capacity change from 0 to 1024 [ 113.965545][T10512] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 113.975473][T10512] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 113.989339][T10512] EXT4-fs (loop3): invalid journal inode [ 113.995168][T10512] EXT4-fs (loop3): can't get journal size [ 114.002873][T10512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.044532][ T8063] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.078180][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.105272][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.124376][T10534] loop1: detected capacity change from 0 to 512 [ 114.129068][T10539] loop3: detected capacity change from 0 to 256 [ 114.136208][T10534] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.143744][T10534] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 114.155345][T10534] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 114.165469][T10534] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 114.190233][T10534] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 114.198542][T10534] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 114.212551][T10534] EXT4-fs (loop1): Remounting filesystem read-only [ 114.220388][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.220958][T10534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.243013][T10534] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 114.252701][T10534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.261124][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.282664][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.313087][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.431673][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.472747][T10565] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 114.739160][T10579] loop3: detected capacity change from 0 to 256 [ 114.845145][T10585] loop4: detected capacity change from 0 to 128 [ 114.864584][T10585] ext4: Unknown parameter 'fsmagic' [ 115.069817][T10597] loop4: detected capacity change from 0 to 256 [ 115.522745][T10607] loop1: detected capacity change from 0 to 512 [ 115.530514][T10607] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 115.540742][T10607] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: iget: bad i_size value: -67835469387268086 [ 115.554491][T10607] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 115.567272][T10607] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.581818][T10607] ext2 filesystem being mounted at /root/syzkaller-testdir707481966/syzkaller.IiFnwc/65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.600713][T10607] usb usb8: usbfs: process 10607 (syz-executor.1) did not claim interface 0 before use [ 115.624671][ T7718] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 115.780531][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.923544][T10630] loop2: detected capacity change from 0 to 512 [ 115.932072][T10630] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 115.940480][T10630] EXT4-fs (loop2): 1 truncate cleaned up [ 115.946550][T10630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.967136][ T8459] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.014880][T10635] loop2: detected capacity change from 0 to 256 [ 116.112940][T10649] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.259456][T10667] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 116.264811][T10674] loop2: detected capacity change from 0 to 256 [ 116.267772][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.285671][T10667] gretap0: entered promiscuous mode [ 116.292403][T10667] gretap0: left promiscuous mode [ 116.320540][T10680] sctp: [Deprecated]: syz-executor.3 (pid 10680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.320540][T10680] Use struct sctp_sack_info instead [ 116.438705][T10698] loop2: detected capacity change from 0 to 512 [ 116.669327][T10721] loop2: detected capacity change from 0 to 1024 [ 117.010551][T10739] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 117.083401][T10757] loop3: detected capacity change from 0 to 512 [ 117.092199][T10757] EXT4-fs: Ignoring removed oldalloc option [ 117.109568][T10757] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz-executor.3: Parent and EA inode have the same ino 15 [ 117.126216][T10757] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz-executor.3: Parent and EA inode have the same ino 15 [ 117.140131][T10757] EXT4-fs (loop3): 1 orphan inode deleted [ 117.146288][T10757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.190693][ T8063] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.337986][T10782] loop3: detected capacity change from 0 to 2048 [ 117.375144][T10782] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.399053][T10784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10784 comm=syz-executor.4 [ 117.426885][T10782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.451813][ T8063] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.710559][ T29] kauditd_printk_skb: 930 callbacks suppressed [ 117.710573][ T29] audit: type=1326 audit(1718262505.217:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e5269ea9 code=0x7ffc0000 [ 117.740894][ T29] audit: type=1326 audit(1718262505.217:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e5269ea9 code=0x7ffc0000 [ 117.765014][ T29] audit: type=1326 audit(1718262505.217:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4e5269ea9 code=0x7ffc0000 [ 117.789108][ T29] audit: type=1326 audit(1718262505.217:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e5269ea9 code=0x7ffc0000 [ 117.813197][ T29] audit: type=1326 audit(1718262505.217:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e5269ea9 code=0x7ffc0000 [ 117.839048][ T29] audit: type=1326 audit(1718262505.217:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4e5269ea9 code=0x7ffc0000 [ 117.863291][ T29] audit: type=1326 audit(1718262505.267:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e5269ea9 code=0x7ffc0000 [ 117.887295][ T29] audit: type=1326 audit(1718262505.267:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4e5267627 code=0x7ffc0000 [ 117.911328][ T29] audit: type=1326 audit(1718262505.267:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4e522d309 code=0x7ffc0000 [ 117.935315][ T29] audit: type=1326 audit(1718262505.267:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fb4e5269ea9 code=0x7ffc0000 [ 118.416723][T10859] loop4: detected capacity change from 0 to 512 [ 118.460590][T10859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.480996][T10859] ext4 filesystem being mounted at /root/syzkaller-testdir2309049530/syzkaller.0CMhXM/89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.528765][T10868] loop1: detected capacity change from 0 to 512 [ 118.536747][T10868] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 118.545020][ C0] ================================================================== [ 118.545059][ C0] BUG: KCSAN: data-race in can_receive / can_stat_update [ 118.545105][ C0] [ 118.545108][ C0] read-write to 0xffff88811644c268 of 8 bytes by interrupt on cpu 1: [ 118.545124][ C0] can_receive+0x62/0x1f0 [ 118.545158][ C0] can_rcv+0xe7/0x180 [ 118.545194][ C0] __netif_receive_skb+0x123/0x280 [ 118.545227][ C0] process_backlog+0x21d/0x3c0 [ 118.545257][ C0] __napi_poll+0x63/0x3c0 [ 118.545287][ C0] net_rx_action+0x324/0x740 [ 118.545320][ C0] handle_softirqs+0xc3/0x280 [ 118.545347][ C0] run_ksoftirqd+0x1c/0x30 [ 118.545380][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 118.545408][ C0] kthread+0x1d1/0x210 [ 118.545437][ C0] ret_from_fork+0x4b/0x60 [ 118.545461][ C0] ret_from_fork_asm+0x1a/0x30 [ 118.545490][ C0] [ 118.545493][ C0] read to 0xffff88811644c268 of 8 bytes by interrupt on cpu 0: [ 118.545509][ C0] can_stat_update+0x444/0x6b0 [ 118.545547][ C0] call_timer_fn+0x3a/0x300 [ 118.545569][ C0] __run_timer_base+0x417/0x640 [ 118.545588][ C0] run_timer_softirq+0x31/0x70 [ 118.545609][ C0] handle_softirqs+0xc3/0x280 [ 118.545634][ C0] irq_exit_rcu+0x3e/0x90 [ 118.545662][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 118.545693][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.545727][ C0] console_flush_all+0x4fc/0x710 [ 118.545746][ C0] console_unlock+0x7b/0x280 [ 118.545766][ C0] vprintk_emit+0x3ed/0x5e0 [ 118.545784][ C0] vprintk_default+0x26/0x30 [ 118.545804][ C0] vprintk+0x75/0x80 [ 118.545828][ C0] _printk+0x7a/0xa0 [ 118.545849][ C0] __ext4_msg+0x18e/0x1a0 [ 118.545876][ C0] ext4_check_feature_compatibility+0x59d/0x5e0 [ 118.545909][ C0] ext4_fill_super+0x20dc/0x39e0 [ 118.545936][ C0] get_tree_bdev+0x253/0x2e0 [ 118.545963][ C0] ext4_get_tree+0x1c/0x30 [ 118.545993][ C0] vfs_get_tree+0x56/0x1d0 [ 118.546020][ C0] do_new_mount+0x227/0x690 [ 118.546043][ C0] path_mount+0x49b/0xb30 [ 118.546063][ C0] __se_sys_mount+0x27f/0x2d0 [ 118.546088][ C0] __x64_sys_mount+0x67/0x80 [ 118.546112][ C0] x64_sys_call+0x25c9/0x2d70 [ 118.546139][ C0] do_syscall_64+0xc9/0x1c0 [ 118.546157][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.546188][ C0] [ 118.546192][ C0] value changed: 0x0000000000008d6d -> 0x0000000000008d6e [ 118.546204][ C0] 2024/06/13 07:08:26 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 118.546208][ C0] Reported by Kernel Concurrency Sanitizer on: [ 118.546217][ C0] CPU: 0 PID: 10868 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 118.546240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 118.546254][ C0] ================================================================== [ 118.858268][T10868] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: iget: bad i_size value: -67835469387268086 [ 118.878181][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 118.894867][T10868] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 118.925215][T10868] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.939819][T10868] ext2 filesystem being mounted at /root/syzkaller-testdir707481966/syzkaller.IiFnwc/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.968525][T10868] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.