last executing test programs: 3.33197389s ago: executing program 4 (id=4414): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005311ffff08000000293108000000000018000000020000000000000000000000c866f4ff190000009500000000000000183400000200000000000000000081268f7580eb22b57600008520000003000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x84, &(0x7f0000000600)=""/132, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x1, 0x100, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0xffffffffffffffff], &(0x7f0000000940)=[{0x4, 0x1, 0x1, 0xc}, {0x4, 0x5, 0x2, 0x8}, {0x3, 0x1, 0x5, 0xc}, {0x1, 0x1, 0xc, 0xa}, {0x2, 0x1, 0x9, 0x9}, {0x5, 0x3, 0x3, 0xb}, {0x3, 0x1, 0x9, 0x7}], 0x10, 0x3633}, 0x90) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) 2.291955521s ago: executing program 2 (id=4422): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x8040) 2.276096502s ago: executing program 4 (id=4424): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') read$nci(r1, &(0x7f0000000140)=""/117, 0x75) perf_event_open(&(0x7f0000000a40)={0x0, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fchmod(r2, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, &(0x7f0000000100)={0x77359400}) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x48f, &(0x7f0000000200)={0x6, @private, 0x0, 0x1, 'lc\x00'}, 0x2c) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000019440)=""/102391, 0xffa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0180d800000000000000124000000c00217f08000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000002c0)={0xcc2, 0x7fffffff, 0xffff, 0xe00, 0x1a, "23dfec4cb646e24f287a62f3aac63c9c339626"}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000280), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r10}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 2.175909615s ago: executing program 3 (id=4425): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000925b723fa2f306b13df98be1b900000000000000007912c800000000009500ffff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002980)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a52aeb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94eda6ae0cc52"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe59, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0}}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_expedited', 0x2082, 0x181) r2 = gettid() r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0xa000000a}) finit_module(0xffffffffffffffff, 0x0, 0x0) finit_module(r4, 0x0, 0x0) tkill(r2, 0x7) 2.157493236s ago: executing program 2 (id=4426): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170031f7"], 0x14}}, 0x0) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000008c0)={0x6, {{0x2, 0x0, @multicast1=0xe0000002}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async, rerun: 64) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000002c0)=0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x14}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="17e4743eaaaaaaaaaaaaaabb86dd613f800000140600fe8000000000000000000000000000bbfe02000000000000008f0000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400000090780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c000280080001c0000000020c00018008000140ac1414bb05000500020000000500010006"], 0x68}}, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) (rerun: 64) futex(&(0x7f0000000500)=0x1, 0x4, 0x2, &(0x7f0000000580)={r7, r8+60000000}, &(0x7f00000005c0)=0x1, 0x2) (async, rerun: 64) r9 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x88080, 0xb8) (rerun: 64) process_madvise(r9, 0x0, 0x0, 0x9, 0x0) syz_extract_tcp_res(&(0x7f0000000140), 0x6, 0x7) 2.032496751s ago: executing program 0 (id=4428): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000cc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c090000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}}, 0x0) 1.891716436s ago: executing program 3 (id=4429): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") open(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0xfecc) (async) write$binfmt_script(r1, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, 0x0, &(0x7f0000000400)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000640)={0xf4, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xb6, 0x5, "f616ca1a399537fb9461e3105365b5841cb2785f21a98e49d453c454c34717a28faa4df6850c2ea64bbf59cd31c42932b8aee4cb7958c87265501586f3290290992fd1f4c4af5bac00a2dde57de39487b9defcfa598519b37ee38ac9e0171626da7ada331ab7359a5cd0f993523436d1c1f3ff4d46307d917391907823858c775ebdaf33ed0c782c968a0ec3e6e0e8aaa5c9a54ef4e956b5eb50850879130fcb21d2c01cf4b38aae7eb8c554cbf6d17c97ff"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0xf4}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000640)={0xf4, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xb6, 0x5, "f616ca1a399537fb9461e3105365b5841cb2785f21a98e49d453c454c34717a28faa4df6850c2ea64bbf59cd31c42932b8aee4cb7958c87265501586f3290290992fd1f4c4af5bac00a2dde57de39487b9defcfa598519b37ee38ac9e0171626da7ada331ab7359a5cd0f993523436d1c1f3ff4d46307d917391907823858c775ebdaf33ed0c782c968a0ec3e6e0e8aaa5c9a54ef4e956b5eb50850879130fcb21d2c01cf4b38aae7eb8c554cbf6d17c97ff"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0xf4}}, 0x0) socket(0x1d, 0x2, 0x6) (async) r3 = socket(0x1d, 0x2, 0x6) getsockopt$bt_BT_SECURITY(r3, 0x6a, 0x3, 0x0, 0x205fffff) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = socket(0x10, 0x3, 0x0) r5 = accept$packet(r4, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001100)=0x14) getsockname$packet(r5, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001140)=0xfffffffffffffc86) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)={@val={0xa}, @void, @eth={@dev, @remote, @val={@void}, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x600, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x42) (async) write$tun(r7, &(0x7f00000001c0)={@val={0xa}, @void, @eth={@dev, @remote, @val={@void}, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x600, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x42) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000001f40)=""/231) syz_read_part_table(0x105a, &(0x7f0000000000)="$eJzsz7GNwkAQBdC/9q1lX3QlXBsX+UQP0A6Qk9EFAS3QGAhkgSUqAIL3gtVf6Y9GE96qb7Kb8znJNtlf0pQkq5rU2ib98S9j2q+cyjD1xjq9XTLOk7/X9SN9Z5Hk/ivZzIWfdPlPhufVJVkeXnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy8WwAAAP//PdgK3w==") 1.891434716s ago: executing program 2 (id=4430): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r2 = syz_open_procfs(r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) shutdown(r0, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000000)={0x9, 0x6}) (async) r3 = timerfd_create(0x0, 0x800) timerfd_settime(r3, 0x3, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) (async, rerun: 64) read(r3, &(0x7f0000000100)=""/240, 0xf0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018400000fdffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff050002000008000000b70300000000000085000000730000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="0094b3621580000072beec12fa33", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x20) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000140)={[{@nodiscard}, {@usrquota}]}, 0x7, 0x522, &(0x7f0000000e00)="$eJzs3U1vI3cZAPBnHLtJ2oDTlkOpxDb0RVkE6yRNXyIkSiPxcqpUUe7ZkDhRFCdeJU67iVY0/QQgVAESFzhxQeIDIKF+BIRUCW4cOIEqyLIHLsho7HE2cezgVRybTX4/aTL/F9vP85/Ek3mzJ4Brayoi3o6IkYh4JSKKWXsum+KwOaWPu390byWdkqjX3/tHEknW1v6aT2VPS33vuxE/SM7G3d0/2FyuVMo7p5sPbm1sLa+X18vb8/Nzbyy8ufD6wmyPI0ny5/U+HRFvfevBT3/06++89fuvffDXpb/f/GGa1u2sv9M4+qE59EKMnapfHenfTb4xQgAAHgfPRsQzEfFiRHwlijES525GAwAAAI+h+jcnRltFAAAA4GrKRcREJLlSdr3vRORypVLzGt4vxJO5SnW39tW16t72atoXMRmF3NpGpTzbuFZ4NK0naX2u0RfH9Vdb9UI06vPZNbgfF8fTeqMPAAAAGIzFtv3/B8Xm/j8AAABwxXQ+GT8y8DwAAACAy+NifAAAALj67P8DAADAlfbuO++kU/3+0b3GfQBW39/f26y+f2u1vLtZ2tpbKa1Ud+6U1qvV9Uq51MMnAirV6p3XYnvv7kwtv1ub2d0/WNqq7m3Xlhr39V4qPzOAMQEAAACnPf3CJ39OIuLw6+ONKfVE1lcYambA/5Ek39Zw+8tDygToi0f+kp+pvctJBBi49v/pwPVhHx9I2hvaNgzGum0q/KG94cb/jGWbAwAAhmP6i87/w3WVG3YCwND8eNgJAEPT87H4qcvNAxi8gtv8wbV35vx/m7FuHWfO/3dTrz9SQgAAQN9NNGeHkZ0LnIhcrlQ6Pi2YrG1UyrMR8fmI+FOxMJrW54aYLwAAAAAAAAAAAAAAAAAAAAAAAAA8jur1JOoAAADAlRaR+1uS3f9ruvjyRPvxgSeSfxcb84j44Bfv/ezucq22M5e2//O4vfbzrP3VYRzBAAAAgOuocG5vaz+9tR8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP10/+jeSmsaZNzPFmM8JjvFz8dYYz4WhYh48l9J5E88L4mIkT7EP/woIp7rFD9J04rJLIv2+LmIGB9y/Kf6EB+us08WI+LtTu+/XEw15p3ff/lsuqjPFhtv8o7xW+u/kS7rv8/1GOP5T3870zX+RxHP5zuvf1rxky7xX+ox/u3vHxx066v/KmK64/+fpDnLZQ+sbd2Z2d0/uLWxtbxeXi9vz8/PvbHw5sLrC7MzaxuVcvazY4yffOl3hx93HX8zwMn4rXFONjP8sNv4X+5x/P/59O7Rs81i4Wz8iJsvdf79P9eYd17+6d/EK9niSfunW+XDZvmkG7/5441uuaXxV7ss/+bvv1h/GD9/avw3exv+yTH/srenAACXaXf/YHO5UinvDKDw4mv9e8GkUUi3gi4x53e/0VxIA1o+5xZaBzuGnMZxYWw40Ufjoq+TXOjp377wKFqbwxd5nb/0bamm+wydu4a1RgIAAC7Lw43+YWcCAAAAAAAAAAAAAAAAAAAA11fj8/8jj/hFgC/0+uB6vf7h2W8WOBzOUAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzvXfAAAA///BEb/b") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x10000, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) linkat(r6, &(0x7f0000000380)='./file0\x00', r7, &(0x7f0000000280)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x452, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x204200, 0x0) (rerun: 32) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r9, 0x80083314, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e21, 0x8, @empty, 0x200}, @in={0x2, 0x4ea4, @multicast1}, @in6={0xa, 0x4e25, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x313}], 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6c, &(0x7f0000000340)={r11, @in={{0x2, 0x0, @loopback}}}, &(0x7f0000000d00)=0x84) 1.7922325s ago: executing program 0 (id=4431): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000840)='\x02;\xe5\b\x00\x1c\x9cB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QX\xa2\xf3\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x8eO\x02?\xae\x1e\xf4L\x95\xb9\x00\xdd\xe97 0_\xe4]W\x1a\x7f\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x91\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\x01\x00REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96h\xfe(^_\xe4\xbe\x96\xe5\xb7e\"$\xd1~\xdfe\x93\x7f\x94{L`\x1a2\xe8\xbc\xc3\xf6\xa4\x1b\xb20\xc6H\x1dg\xb5j\xac\x1bPN\xfaX\xb4\x85\x1fO\xba\xcd\x94\x06\x8f\xfe\xff\xea\x03\x014\xbd\xf0\x12\xa9\xf2\xb6\"\xabR\xeb\xe7\xaf\xe9\xab\xc7`\xb9\rY\xde\x7f\xfaxq\xc2\xeex\x13\x9du|\xd5\xe3\x1a\x98i\x1c\x9d|\b\x89\x1fG\xc3\xee\x11\xefS]\xe2\xff\x9c^\x94=\bI\xfdx\xd3w,\x8c\xcf\x9b\a9J@\xf0\xd8;\x9d\n\xd3#pq\x8b\xa2\x96\xfc\xa1\a\xcdZ\xe3Q\xfbd\r\x9eB@\xbfq\xdf(\xb2\x01Q7q\x9ee\x87\x1b\x88\xc2{2\xec\xa9H\xf8\x9d\xa1\x0e\x9f\xd0\x89}\xcem\xaa\xf2\x9c\x8c^La\xc4\x11\'\x02\xd1{\x8a\x04\xc2H0\xf7\xb6F\xcf\x00W\x8a\x8c\xbb/\x1d\x96<\xcb\"p\x00\x00\x00\x00\x00\x00\x00\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x8000, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x6256, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0x1ff}, {0x6}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0xa6800000) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004401050000000000000000000000000000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000330000000a000000fc0000000000000000000000000000000000000001000000000000000000000000000000ac141400000000000000000000000000000000006c0000000a000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b0000000a000000ac1e000100000000000000000000000000000000000000000000000000000000000000007f00000100000000000000000000000000000000000000000a000000ff0100000000000000000000000000010000000006"], 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x10100) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000380)={@dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, "ca52e72c67c42a55462fb942bf5ab13109201bc7df32a48206d180177a4647c1", 0x5, 0x9, 0x0, 0x907}, 0x3c) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000007112160000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r10 = ioctl$TIOCGPTPEER(r9, 0x5441, 0x1) ioctl$GIO_CMAP(r10, 0x4b70, &(0x7f00000003c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 's}z0\x00'}]}}}]}], {0x14, 0x10}}, 0x98}}, 0x4004855) 1.757659932s ago: executing program 4 (id=4432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x90, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x240, 0x0, 0x81, 0x9, 0x0, 0x0, 0x0, 0x0, 0x54}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) (async) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x6c, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x8, 0x0]}}, {{0x1c, 0x1, {0xb, 0x0, 0x10}}, {0x4}}]}]}, 0x6c}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x28, 0xfffffffc}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) accept$phonet_pipe(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x10) (async) recvmsg(r3, &(0x7f0000000cc0)={&(0x7f0000000340), 0x80, &(0x7f0000000c00)=[{&(0x7f0000000540)=""/56, 0x38}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000680)=""/200, 0xfffffffffffffffc}, {&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f0000000840)=""/129, 0x81}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/11, 0xb}, {&(0x7f0000000b00)=""/221, 0xdd}], 0x9}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x64, 0x0, 0x0, 0xffffffffffffff8a, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 32) lstat(0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.709374754s ago: executing program 1 (id=4433): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, 0x0}, 0x20) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0300000000000000000014000000080003000900000008001000aea5000008000600ff0f000008000500fdffffff"], 0xfffffc50}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a", 0x23}], 0x1}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000f00)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000240)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.603908998s ago: executing program 2 (id=4434): creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005311ffff08000000293108000000000018000000020000000000000000000000c866f4ff190000009500000000000000183400000200000000000000000081268f7580eb22b57600008520000003000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x84, &(0x7f0000000600)=""/132, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x1, 0x100, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0xffffffffffffffff], &(0x7f0000000940)=[{0x4, 0x1, 0x1, 0xc}, {0x4, 0x5, 0x2, 0x8}, {0x3, 0x1, 0x5, 0xc}, {0x1, 0x1, 0xc, 0xa}, {0x2, 0x1, 0x9, 0x9}, {0x5, 0x3, 0x3, 0xb}, {0x3, 0x1, 0x9, 0x7}], 0x10, 0x3633}, 0x90) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) 1.367747257s ago: executing program 4 (id=4435): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001000390400000000f306856994000000", @ANYRES32=r4, @ANYBLOB="e3eb000000000000440012800b000100697036746e6c00003400028014000300fc"], 0x64}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x403, &(0x7f0000000000), 0xfc, 0x56f, &(0x7f0000000a40)="$eJzs3V9vW2cZAPDnOHaatIEE2MVA2qjYpHaCJs3KtgihtUiIu0mgwXWJUjeK6sRV7GxNNEEqPgASQjCJG7jiBokPgIT6ERDSJHY/MQSqoAOJXcDOdP44TV27SdPYrpzfT3p9Xp9/z/PazjnH5z3xCeDEOhsRVyJiIiJeiojZcnylLLFblGy+j+69s5KVJNL0zX8mkZTjstmSsmTOlItNFYOeWts7N5Ybjfpm+XyhvX5zobW9c2FtfXm1vlrfuHRp8dWl15ZeWbp4LO3M2vX6t//2i5/+9juv//Frb39w9R/nf5TlO1NO77Tj8aSFH/efo3hNatlrsacaEZuPH+ypNFG2pxadBwAAnmbZMf7nI+Ir+fH/bEzkR3P9Te6rJwPPDgAAADgO6eWZ+F+y15MFAAAAjKFKfg1sUpkvrwWYiUplfr64hveZOF1pNFvtr15vbm1cK66VnYta5fpao36xvKZ2LmpJ9nxx74xC8fzlfFpWkgeuAf757HQ+fX6l2bg2ihMeAAAAcAKd6fr+/5/Z4vs/AAAAMGbmRp0AAAAAMHAHff+vDCkPAAAAYHCO0P8/OYg8AAAAgIH47htvZCXt3P/62lvbWzeab124Vm/dmF/fWplfaW7enF9tNlcb6amI9YPW12g2b349NrZuLbTrrfZCa3vn6npza6N9de2BW2ADAAAAQ/S5L995P4mI3W9M5yU6ffsTfRbwWwEwNg74154POpU0e/hw8PkAw9NvNw+Mv+qjJ7vMF8ZYrRgko84DGJ2DNgBT/eb40yCyAQAABuHcF++8nyYP9/9X758bAMaUn/aEk6tP/386O+xEgKE7oP8fGGM1VwDCiXdw/38fh+7/T9MD1wUAAAzUTF6SynzZFzgTlY/TQsxFLbm+1qhfjIjPRsRfZmunsueL+ZKJfxoAAAAAAAAAAAAAAAAAAAAAAAAAgENK0yTSI6geaSkAAABgFCIqf0/K+3+dm31xpvv8wGTycX4r4E/SNH37V2/+8tZyu725mI3/Vz5+MiLa75bjXx7FGQwAAACgo3OX/+J7em3E2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwrj66985Kpwwz7t1vRcRcr/jVmMqHU1GLiNP/TqK6b7kkIiaOIf7u7Yh4tlf8JEsr5sosuuNXImI6kltDiP9cmqY945950uBwwt3Jtj9Xev39VeJsPuz9918tyuUnjd9/+1fZ2/5NdMevFtu/zxwyxpfe+/3Cvqc/uF89VUyv9t7+dOIn++In0Zka8UKvYNWHR/3w+zs7/XJLfxNxruf+J9mbJ6sttNdvLrS2dy6srS+v1lfrG5cuLb669NrSK0sXF66vNerlY88YP3vuD5/0i3/3bMTpMv5kJ6dyxzJXDL5Ztn+5e//zYlap9Vvzlb3a/9+7de8LRbXWtYq4ezvi/Au93/9n8+GDr3/p1/9Nc/l+IJt+rtwnJLtFPaL8+EbE87/78/N92397qqwd7v3fn/z5fivt8tL3fvLXQ84KAAxBa3vnxnKjUd+MubKyN+aYK++maXq4mbOj0ieLlR3AHXMrpiOiz6TeseKwa36mb6ofTkcM9k05cuXy48ycnur6sD26kuw+BQ08wZXJ/AM56i0TAABw3O4f/Y86EwAAAAAAAAAAAAAAAAAAADi5hvG7Yt0xd0fTVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR/o0AAD//1NB3o0=") sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) 1.341850288s ago: executing program 1 (id=4436): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x8040) 1.063822229s ago: executing program 0 (id=4437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1000004, 0x13, r1, 0x0) mmap(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000439000/0x4000)=nil, 0x4000, 0x0, 0x852, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53b, &(0x7f0000000a80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x0) mmap(&(0x7f0000a2b000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(0x0, 0x145142, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x8}]}, @CTA_STATUS={0x8}]}, 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000080002000500000008000700e000000208000800ac1434002c0101"], 0x158}}, 0x0) 1.063611469s ago: executing program 3 (id=4438): fsopen(&(0x7f0000000040)='devpts\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 977.974852ms ago: executing program 1 (id=4439): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) sendmmsg$inet(r3, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004004) io_uring_enter(r0, 0x92, 0x18, 0x0, 0x0, 0x0) 713.118392ms ago: executing program 0 (id=4440): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) msgget$private(0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)={'full'}, 0x2f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000000001010400000000000000ed090000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000002400068014000400200100000000000000000000000000010c000380060002004e220000"], 0xb8}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000000000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000180000003f00000000000000ffffff7fbf91000000000000b7020000000000008500000084000000b700000000000f009595000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) pipe2$9p(&(0x7f0000000100), 0x0) r8 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$can_bcm(0x1d, 0x2, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x2, 0x4, 0x6, 0x0, r9}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x2, 0x2}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r8, @ANYBLOB="8145fec671344a04b0b82289264621941f0f7f19121c8c2b6d5a583d39114a1b96d8d5acfdef874344b15ba556ed11e2c9fe3400162ff3669484e9cde58441aa14c41fecbf7cc0b314f5b7e559c057480367e014291b0ecc3a5336c66e9e8b766a4d2db43589e2db637baff885767759949c9f4c9a3f40c906206521d9d44a764fe48d2147274e0bc62790aef200f1cd0701f10c377b", @ANYRES8=r4], &(0x7f00000000c0)=""/187, 0x32, 0xbb, 0x0, 0x80000000}, 0x1e) 652.010715ms ago: executing program 1 (id=4441): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(r0, 0x0, &(0x7f0000000080), 0x0) 645.035175ms ago: executing program 4 (id=4442): r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) connect$inet6(r0, &(0x7f00000000c0), 0x1c) (async) ioperm(0x0, 0x4, 0x1) (async) umount2(0x0, 0xf) 596.957417ms ago: executing program 3 (id=4443): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r3, &(0x7f0000006080)={&(0x7f0000005f80)={0x1d, r4}, 0x10, &(0x7f0000006040)={&(0x7f0000005fc0)=ANY=[@ANYBLOB="0100000000000000ef860288f31c3a16", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 479.950001ms ago: executing program 1 (id=4444): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc0, 0x0, &(0x7f00000000c0)) 477.123622ms ago: executing program 0 (id=4445): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) eventfd(0x6) 408.973404ms ago: executing program 2 (id=4446): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x5414, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0xffff, 0x2}, {0xffff, 0x5}, {0xf001, 0xf6}, {0x3, 0x3}, {0x20, 0x4}, {0xfff, 0x8}, {0x8000, 0x1}]}) 318.854948ms ago: executing program 3 (id=4447): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r4, 0x0) request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='logon\x0e', 0x0) 203.823212ms ago: executing program 4 (id=4448): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x138, 0xa, 0x148, 0x138, 0x10, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x33}, 0x0, 0xd0, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@ah={{0x30}}, @common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x350) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60cb763e00103afffe800000000009000000000000000000ff020000005a53dc362358e3a940000186009078ff0011f90000000038000000"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x177, 0x10, 0xc7ae, 0x27fffd}, &(0x7f0000000040)=0xfffffd63) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}], 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket$inet_udp(0x2, 0x2, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) 203.536182ms ago: executing program 0 (id=4449): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async, rerun: 64) setuid(0xee01) (rerun: 64) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x2000, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) (async) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x5000}], 0xf1876053ba11544d, 0xe7f1) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32b10b61f060065c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "3321ef5b1bd01fec"}) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000deffff000000000900010073797a30200000003c000000090a010400000000000000000100000008000a400000feff0800020073797a32000000000900010073797a30000000000900054000000021480000000c8a01080000000000000000010000000900020073797a32000003801800008008000340000000020900090073797a32000000000900014073797a3000000000140000001000010000000000000000000000000a00000000969d9a1f575953c0fa28c0847463854b41a070d20851ae3a5d264b1f869d8c95ea4241022887a0370b00"/261], 0xcc}}, 0x0) (async) r7 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) io_uring_enter(r7, 0x3, 0x10a5, 0xe, &(0x7f0000000040)={[0x1]}, 0x8) (async) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) io_uring_enter(r7, 0xde5, 0x0, 0x0, 0x0, 0x0) (async) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0\x00') (async) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/partitions\x00', 0x0, 0x0) 169.010234ms ago: executing program 1 (id=4450): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x2000005c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 95.855077ms ago: executing program 2 (id=4451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x2, 0x1, @mcast2, @loopback, 0x8, 0x7, 0x80000000, 0x8}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@multicast2, @broadcast, 0x0}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xd4, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40800}, 0x20000881) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r12, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xffff0046}) getsockopt$nfc_llcp(r11, 0x118, 0x0, &(0x7f0000000140)=""/192, 0x20000057) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x2, 0x1, @mcast2, @loopback, 0x8, 0x7, 0x80000000, 0x8}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@multicast2, @broadcast}, &(0x7f0000000380)=0xc) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xd4, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40800}, 0x20000881) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) (async) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r12, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xffff0046}) (async) getsockopt$nfc_llcp(r11, 0x118, 0x0, &(0x7f0000000140)=""/192, 0x20000057) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x34}}, 0x0) (async) 0s ago: executing program 3 (id=4452): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r0, 0x0, &(0x7f0000000080), 0x0) kernel console output (not intermixed with test programs): 325.963107][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.989053][T16467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.017295][T16467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.024321][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.050468][T16467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.108956][T16467] hsr_slave_0: entered promiscuous mode [ 326.118395][T16467] hsr_slave_1: entered promiscuous mode [ 326.125819][T16467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.135536][T16467] Cannot create hsr debugfs directory [ 326.452063][T16467] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.472968][T16467] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.493612][T16467] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.515173][T16467] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.558664][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3990'. [ 326.611163][T16467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.643537][T16467] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.664720][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.671809][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.701810][ T3151] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.708889][ T3151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.856342][T16467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.872709][T16551] netlink: 'syz.2.3992': attribute type 29 has an invalid length. [ 326.873408][T16549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3993'. [ 326.893254][T16551] netlink: 'syz.2.3992': attribute type 29 has an invalid length. [ 326.960638][T16549] netlink: 'syz.4.3993': attribute type 4 has an invalid length. [ 327.035079][T16467] veth0_vlan: entered promiscuous mode [ 327.054695][T16467] veth1_vlan: entered promiscuous mode [ 327.081936][T16467] veth0_macvtap: entered promiscuous mode [ 327.091774][T16467] veth1_macvtap: entered promiscuous mode [ 327.116929][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.127464][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.137427][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.147876][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.157961][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.168650][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.224329][T16467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.226876][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.241993][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.242007][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.262429][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.281829][T16467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.299030][T16467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.307827][T16467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.316707][T16467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.325520][T16467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.638051][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 327.856238][T16588] syzkaller1: entered promiscuous mode [ 327.861735][T16588] syzkaller1: entered allmulticast mode [ 327.887918][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.678498][T16615] __nla_validate_parse: 3 callbacks suppressed [ 328.678567][T16615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4011'. [ 329.134626][T16622] loop2: detected capacity change from 0 to 764 [ 329.162336][T16622] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 329.345347][T16629] nfs4: Unknown parameter 'mblk_io_submit' [ 329.680339][T16644] loop2: detected capacity change from 0 to 2048 [ 329.726810][T16644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.749573][T16644] ext4 filesystem being mounted at /root/syzkaller.ymXy7U/215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.824795][T16644] loop2: detected capacity change from 2048 to 64 [ 329.833174][T16644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16644 comm=syz.2.4018 [ 329.872354][T13496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.902185][T16646] kmmpd-loop2: attempt to access beyond end of device [ 329.902185][T16646] loop2: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 329.916025][T16646] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 330.181773][ T8103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.317255][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 330.317272][ T29] audit: type=1400 audit(1719759449.019:13987): avc: denied { map } for pid=16657 comm="syz.0.4024" path="socket:[63659]" dev="sockfs" ino=63659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 330.387090][ T8103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.480557][ T8103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.578913][ T8103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.630250][T16671] loop4: detected capacity change from 0 to 2048 [ 330.693567][ T8103] bridge_slave_1: left allmulticast mode [ 330.699295][ T8103] bridge_slave_1: left promiscuous mode [ 330.704960][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.727780][ T8103] bridge_slave_0: left allmulticast mode [ 330.733442][ T8103] bridge_slave_0: left promiscuous mode [ 330.739130][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.757782][T16675] loop1: detected capacity change from 0 to 764 [ 330.778905][T16675] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 330.983452][T16680] netlink: 'syz.1.4029': attribute type 4 has an invalid length. [ 331.080865][T16680] loop1: detected capacity change from 0 to 1024 [ 331.127677][T16680] ext4: Unknown parameter 'appraise' [ 331.342440][ T29] audit: type=1400 audit(1719759450.039:13988): avc: denied { write } for pid=16692 comm="syz.3.4031" laddr=::ffff:172.20.20.170 lport=58097 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 331.546801][ T8103] bridge0: left allmulticast mode [ 331.554727][ T8103] bond0: left allmulticast mode [ 331.559669][ T8103] bond_slave_0: left allmulticast mode [ 331.565307][ T8103] bond_slave_1: left allmulticast mode [ 331.570757][ T8103] bond0: left promiscuous mode [ 331.575532][ T8103] bond_slave_0: left promiscuous mode [ 331.580947][ T8103] bond_slave_1: left promiscuous mode [ 331.741034][ T8103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.766414][ T8103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.779339][ T8103] bond0 (unregistering): Released all slaves [ 331.816855][T16694] syzkaller1: entered promiscuous mode [ 331.822437][T16694] syzkaller1: entered allmulticast mode [ 331.840355][T16700] pim6reg: entered allmulticast mode [ 331.976773][ T8103] hsr_slave_0: left promiscuous mode [ 331.997723][ T8103] hsr_slave_1: left promiscuous mode [ 332.016265][ T8103] dummy0: left promiscuous mode [ 332.021283][ T8103] vcan0: left allmulticast mode [ 332.026389][ T8103] vcan0: left promiscuous mode [ 332.031204][ T8103] veth1_macvtap: left promiscuous mode [ 332.036759][ T8103] veth0_macvtap: left promiscuous mode [ 332.042301][ T8103] veth1_vlan: left promiscuous mode [ 332.048260][ T8103] veth0_vlan: left promiscuous mode [ 332.350325][T16660] chnl_net:caif_netlink_parms(): no params data found [ 332.482166][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.489267][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.523083][T16660] bridge_slave_0: entered allmulticast mode [ 332.523711][T16660] bridge_slave_0: entered promiscuous mode [ 332.561095][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.568312][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.597637][T16660] bridge_slave_1: entered allmulticast mode [ 332.604545][T16660] bridge_slave_1: entered promiscuous mode [ 332.632828][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.656271][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.670537][ T29] audit: type=1400 audit(1719759451.369:13989): avc: denied { connect } for pid=16725 comm="syz.4.4040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 332.715616][T16660] team0: Port device team_slave_0 added [ 332.722081][T16660] team0: Port device team_slave_1 added [ 332.730852][ T29] audit: type=1326 audit(1719759451.429:13990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481bd04b99 code=0x7ffc0000 [ 332.767117][ T29] audit: type=1326 audit(1719759451.439:13991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f481bd04b99 code=0x7ffc0000 [ 332.790755][ T29] audit: type=1326 audit(1719759451.439:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481bd04b99 code=0x7ffc0000 [ 332.814452][ T29] audit: type=1326 audit(1719759451.439:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f481bd04b99 code=0x7ffc0000 [ 332.838014][ T29] audit: type=1326 audit(1719759451.439:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481bd04b99 code=0x7ffc0000 [ 332.861708][ T29] audit: type=1326 audit(1719759451.439:13995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f481bd04b99 code=0x7ffc0000 [ 332.885416][ T29] audit: type=1326 audit(1719759451.439:13996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.4.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481bd04b99 code=0x7ffc0000 [ 332.910074][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.917052][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.942968][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.023865][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.030833][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.056784][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.160267][T16660] hsr_slave_0: entered promiscuous mode [ 333.168298][T16660] hsr_slave_1: entered promiscuous mode [ 333.176497][T16660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.189918][T16660] Cannot create hsr debugfs directory [ 333.195590][T16729] syzkaller1: entered promiscuous mode [ 333.201072][T16729] syzkaller1: entered allmulticast mode [ 333.383160][T16740] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.391936][T16740] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.400754][T16740] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.409553][T16740] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.468548][T16740] vxlan0: entered promiscuous mode [ 333.628489][T16660] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.643144][T16746] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 333.658253][T16660] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.678891][T16748] IPVS: Error connecting to the multicast addr [ 333.685869][T16660] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.701529][T16660] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.785536][T16660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.803916][T16660] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.822886][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.830180][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.858941][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.866118][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.921877][T16660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.045537][T16660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.217627][T16660] veth0_vlan: entered promiscuous mode [ 334.228170][T16660] veth1_vlan: entered promiscuous mode [ 334.278427][T16660] veth0_macvtap: entered promiscuous mode [ 334.290013][T16660] veth1_macvtap: entered promiscuous mode [ 334.301732][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.312253][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.322159][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.332618][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.342493][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.352919][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.362731][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.373332][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.384902][T16660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.394991][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.405427][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.415293][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.425708][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.435570][T16660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.446178][T16660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.457909][T16660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.468364][T16660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.477233][T16660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.486173][T16660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.495253][T16660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.641555][T16775] loop4: detected capacity change from 0 to 512 [ 334.810985][T16778] loop3: detected capacity change from 0 to 512 [ 334.832206][T16778] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 335.645636][T16793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4055'. [ 335.961801][T16812] rtc_cmos 00:00: Alarms can be up to one day in the future [ 336.034694][ T8107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.105804][ T8107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.144071][T16796] chnl_net:caif_netlink_parms(): no params data found [ 336.178829][ T8107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.243624][T16817] loop1: detected capacity change from 0 to 2048 [ 336.267685][ T8107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.299224][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 336.299239][ T29] audit: type=1326 audit(1719759454.999:14034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.355910][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4064'. [ 336.374327][T16796] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.381410][T16796] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.386123][ T29] audit: type=1326 audit(1719759455.029:14035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.402574][T16796] bridge_slave_0: entered allmulticast mode [ 336.412075][ T29] audit: type=1326 audit(1719759455.029:14036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.441582][ T29] audit: type=1326 audit(1719759455.029:14037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.465282][ T29] audit: type=1326 audit(1719759455.029:14038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.488936][ T29] audit: type=1326 audit(1719759455.049:14039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.490160][T16796] bridge_slave_0: entered promiscuous mode [ 336.512546][ T29] audit: type=1326 audit(1719759455.049:14040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.521439][T16796] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.541968][ T29] audit: type=1326 audit(1719759455.049:14041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.548962][T16796] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.549140][T16796] bridge_slave_1: entered allmulticast mode [ 336.572453][ T29] audit: type=1326 audit(1719759455.049:14042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 336.579960][T16796] bridge_slave_1: entered promiscuous mode [ 336.585329][ T29] audit: type=1326 audit(1719759455.049:14043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16816 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85822215d0 code=0x7ffc0000 [ 336.711125][T16796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.722207][ T8107] bridge_slave_1: left allmulticast mode [ 336.727886][ T8107] bridge_slave_1: left promiscuous mode [ 336.733524][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.753932][T16828] loop4: detected capacity change from 0 to 764 [ 336.762423][ T8107] bridge_slave_0: left allmulticast mode [ 336.768165][ T8107] bridge_slave_0: left promiscuous mode [ 336.773815][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.819885][T16828] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 337.041906][ T8107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.073628][ T8107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.104904][ T8107] bond0 (unregistering): Released all slaves [ 337.136061][T16796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.169781][T16796] team0: Port device team_slave_0 added [ 337.196343][T16796] team0: Port device team_slave_1 added [ 337.258769][ T8107] hsr_slave_0: left promiscuous mode [ 337.276844][ T8107] hsr_slave_1: left promiscuous mode [ 337.297107][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.304525][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.343052][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.350531][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.387016][ T8107] veth1_macvtap: left promiscuous mode [ 337.392537][ T8107] veth0_macvtap: left promiscuous mode [ 337.398106][ T8107] veth1_vlan: left promiscuous mode [ 337.403369][ T8107] veth0_vlan: left promiscuous mode [ 337.692296][ T8107] team0 (unregistering): Port device team_slave_1 removed [ 337.719650][ T8107] team0 (unregistering): Port device team_slave_0 removed [ 337.808249][T16796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.815244][T16796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.841251][T16796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.946270][T16796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.953242][T16796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.979385][T16796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.272274][T16796] hsr_slave_0: entered promiscuous mode [ 338.306807][T16796] hsr_slave_1: entered promiscuous mode [ 338.313881][T16796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.322236][T16796] Cannot create hsr debugfs directory [ 338.369810][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4074'. [ 338.638643][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'. [ 338.677852][T16796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 338.700328][T16796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 338.721446][T16796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 338.738806][T16870] loop1: detected capacity change from 0 to 512 [ 338.757319][T16796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 338.773905][T16870] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 338.801191][T16870] EXT4-fs (loop1): mount failed [ 338.869873][T16796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.904713][T16796] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.927945][T16881] loop2: detected capacity change from 0 to 512 [ 338.929800][ T3233] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.941278][ T3233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.949521][T16881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 338.962743][T16880] loop4: detected capacity change from 0 to 2048 [ 338.986847][T16881] EXT4-fs (loop2): 1 truncate cleaned up [ 338.995318][T16881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.021582][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.028659][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.080045][T16885] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 339.118419][T16660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.164564][T16796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.312539][T16796] veth0_vlan: entered promiscuous mode [ 339.338704][T16796] veth1_vlan: entered promiscuous mode [ 339.384546][T16796] veth0_macvtap: entered promiscuous mode [ 339.409211][T16796] veth1_macvtap: entered promiscuous mode [ 339.421116][T16796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.421131][T16796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.421143][T16796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.421156][T16796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.421166][T16796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.421239][T16796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.421260][T16796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.421273][T16796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.423084][T16796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.427353][T16796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.525705][T16796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.525797][T16796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.525807][T16796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.525815][T16796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.525827][T16796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.539549][T16796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.542466][T16796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.542530][T16796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.542556][T16796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.542582][T16796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.664417][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4087'. [ 339.937730][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 339.982175][T16922] loop1: detected capacity change from 0 to 512 [ 340.006507][T16922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.019159][T16922] ext4 filesystem being mounted at /root/syzkaller.xg9NvG/265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.114820][T16922] loop1: detected capacity change from 512 to 0 [ 340.121812][T16922] syz.1.4088: attempt to access beyond end of device [ 340.121812][T16922] loop1: rw=12288, sector=84, nr_sectors = 4 limit=0 [ 340.136083][T16922] syz.1.4088: attempt to access beyond end of device [ 340.136083][T16922] loop1: rw=12288, sector=80, nr_sectors = 4 limit=0 [ 340.149379][T16922] EXT4-fs error (device loop1): ext4_write_dquot:6840: comm syz.1.4088: Failed to commit dquot type 1 [ 340.160481][T16922] syz.1.4088: attempt to access beyond end of device [ 340.160481][T16922] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 340.172199][T16932] syz.1.4088: attempt to access beyond end of device [ 340.172199][T16932] loop1: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 340.173602][T16922] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.186799][T16932] EXT4-fs error (device loop1): __ext4_find_entry:1684: inode #2: comm syz.1.4088: reading directory lblock 0 [ 340.195089][T16922] EXT4-fs (loop1): I/O error while writing superblock [ 340.206750][T16932] EXT4-fs (loop1): previous I/O error to superblock detected [ 340.206846][T16932] syz.1.4088: attempt to access beyond end of device [ 340.206846][T16932] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 340.206865][T16932] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.206876][T16932] EXT4-fs (loop1): I/O error while writing superblock [ 340.249433][T16922] syz.1.4088: attempt to access beyond end of device [ 340.249433][T16922] loop1: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 340.262886][T16922] syz.1.4088: attempt to access beyond end of device [ 340.262886][T16922] loop1: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 340.276420][T16922] syz.1.4088: attempt to access beyond end of device [ 340.276420][T16922] loop1: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 340.289878][T16922] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.1.4088: unable to read itable block [ 340.302674][T16922] syz.1.4088: attempt to access beyond end of device [ 340.302674][T16922] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 340.315911][T16922] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.324148][T16922] EXT4-fs (loop1): I/O error while writing superblock [ 340.330924][T16922] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 340.339731][T16922] syz.1.4088: attempt to access beyond end of device [ 340.339731][T16922] loop1: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 340.352858][T16922] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.361120][T16922] EXT4-fs (loop1): I/O error while writing superblock [ 340.367974][T16922] EXT4-fs error (device loop1): ext4_ext_truncate:4432: inode #19: comm syz.1.4088: mark_inode_dirty error [ 340.381345][T16922] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.389680][T16922] EXT4-fs (loop1): I/O error while writing superblock [ 340.396530][T16922] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #19: block 35: comm syz.1.4088: unable to read itable block [ 340.409387][T16922] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.417912][T16922] EXT4-fs (loop1): I/O error while writing superblock [ 340.424802][T16922] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 340.433478][T16922] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.441860][T16922] EXT4-fs (loop1): I/O error while writing superblock [ 340.448739][T16922] EXT4-fs error (device loop1): ext4_truncate:4162: inode #19: comm syz.1.4088: mark_inode_dirty error [ 340.459797][T16922] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.468056][T16922] EXT4-fs (loop1): I/O error while writing superblock [ 340.734564][T16947] loop4: detected capacity change from 0 to 512 [ 340.773335][T16947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 340.807763][T16947] EXT4-fs (loop4): 1 truncate cleaned up [ 340.813824][T16947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.855883][T12928] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 340.869157][T12928] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 340.884835][T12928] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 340.894796][T12928] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 341.047028][T15522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.100171][T16957] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 341.130817][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4099'. [ 341.165068][T16957] geneve0: entered promiscuous mode [ 341.317113][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 341.317128][ T29] audit: type=1326 audit(1719759460.019:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 341.329801][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4102'. [ 341.369516][ T8102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.393739][ T29] audit: type=1326 audit(1719759460.019:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 341.418550][ T29] audit: type=1326 audit(1719759460.019:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 341.442603][ T29] audit: type=1326 audit(1719759460.019:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 341.466458][ T29] audit: type=1326 audit(1719759460.019:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 341.490044][ T29] audit: type=1326 audit(1719759460.019:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 341.513877][ T29] audit: type=1326 audit(1719759460.019:14220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 341.537684][ T29] audit: type=1326 audit(1719759460.019:14221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85822215d0 code=0x7ffc0000 [ 341.561250][ T29] audit: type=1326 audit(1719759460.019:14222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8582224327 code=0x7ffc0000 [ 341.584954][ T29] audit: type=1326 audit(1719759460.019:14223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="syz.2.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8582222b99 code=0x7ffc0000 [ 341.619502][ T8102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.705277][ T8102] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 341.713909][ T8102] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 341.746947][ T8102] team0: Port device netdevsim1 removed [ 341.761869][ T8102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.831361][ T8102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.918299][ T8102] team0: left allmulticast mode [ 341.923461][ T8102] team_slave_0: left allmulticast mode [ 341.929078][ T8102] team_slave_1: left allmulticast mode [ 341.934662][ T8102] team0: left promiscuous mode [ 341.939522][ T8102] team_slave_0: left promiscuous mode [ 341.944951][ T8102] team_slave_1: left promiscuous mode [ 341.950533][ T8102] bridge0: port 3(team0) entered disabled state [ 341.966007][ T8102] bridge_slave_1: left allmulticast mode [ 341.971684][ T8102] bridge_slave_1: left promiscuous mode [ 341.977373][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.997034][ T8102] bridge_slave_0: left allmulticast mode [ 342.002712][ T8102] bridge_slave_0: left promiscuous mode [ 342.008422][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.336023][T16994] loop4: detected capacity change from 0 to 512 [ 342.403412][T16994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 342.452888][T16994] EXT4-fs (loop4): 1 truncate cleaned up [ 342.465690][T16994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.743343][ T8102] bond0: left allmulticast mode [ 342.748349][ T8102] bond_slave_0: left allmulticast mode [ 342.753919][ T8102] bond_slave_1: left allmulticast mode [ 342.759596][ T8102] bond0: left promiscuous mode [ 342.764352][ T8102] bond_slave_0: left promiscuous mode [ 342.770349][ T8102] bond_slave_1: left promiscuous mode [ 343.036251][T17008] loop2: detected capacity change from 0 to 8192 [ 343.076846][ T8102] team0: Port device bond0 removed [ 343.086174][T17008] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 343.097681][ T8102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.120895][ T8102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.146963][ T8102] bond0 (unregistering): Released all slaves [ 343.155809][ T8102] bond1 (unregistering): Released all slaves [ 343.167697][ T8102] bond2 (unregistering): Released all slaves [ 343.247298][ T8102] tipc: Left network mode [ 343.263870][T15522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.292563][T16971] chnl_net:caif_netlink_parms(): no params data found [ 343.402325][ T8102] hsr_slave_0: left promiscuous mode [ 343.423094][ T8102] hsr_slave_1: left promiscuous mode [ 343.436054][ T8102] vcan0: left allmulticast mode [ 343.440970][ T8102] vcan0: left promiscuous mode [ 343.445833][ T8102] veth1_macvtap: left promiscuous mode [ 343.451358][ T8102] veth0_macvtap: left promiscuous mode [ 343.456883][ T8102] veth1_vlan: left promiscuous mode [ 343.462130][ T8102] veth0_vlan: left promiscuous mode [ 343.501881][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4118'. [ 343.687133][ T8102] team0 (unregistering): Port device team_slave_1 removed [ 343.712720][ T8102] team0 (unregistering): Port device team_slave_0 removed [ 343.819256][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.826435][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.836273][T16971] bridge_slave_0: entered allmulticast mode [ 343.853228][T16971] bridge_slave_0: entered promiscuous mode [ 343.874215][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.881379][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.913061][T16971] bridge_slave_1: entered allmulticast mode [ 343.927285][T16971] bridge_slave_1: entered promiscuous mode [ 343.956199][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.975359][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.017401][T16971] team0: Port device team_slave_0 added [ 344.023950][T16971] team0: Port device team_slave_1 added [ 344.075311][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.082261][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.108266][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.169421][T17034] netlink: 'syz.0.4125': attribute type 13 has an invalid length. [ 344.173426][T17033] 9pnet_fd: Insufficient options for proto=fd [ 344.188013][T17034] gretap0: refused to change device tx_queue_len [ 344.209656][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.216753][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.242691][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.303215][T16971] hsr_slave_0: entered promiscuous mode [ 344.311140][T16971] hsr_slave_1: entered promiscuous mode [ 344.416164][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'. [ 344.462230][T17042] loop2: detected capacity change from 0 to 512 [ 344.523428][T17042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.539512][T17042] ext4 filesystem being mounted at /root/syzkaller.wpsUC8/17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.554841][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 344.589930][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 344.614408][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 344.645556][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 344.686046][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 344.692650][T16971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.727018][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 344.758296][T16971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.766267][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 344.793137][T16971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.812467][T17042] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 18: comm syz.2.4127: lblock 23 mapped to illegal pblock 18 (length 1) [ 344.814071][T16971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.847049][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 19: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 344.870542][T17042] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 20: comm syz.2.4127: path /root/syzkaller.wpsUC8/17/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 344.924423][T17048] loop4: detected capacity change from 0 to 512 [ 344.948796][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.978787][T17048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.993722][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.028846][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.035918][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.048148][T17048] ext4 filesystem being mounted at /root/syzkaller.t5Pd7S/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.076804][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.084042][ T3157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.167577][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 345.271551][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.301353][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 345.361689][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 345.391024][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 345.422116][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 345.458886][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 345.468263][T16971] veth0_vlan: entered promiscuous mode [ 345.490058][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 345.505782][T16971] veth1_vlan: entered promiscuous mode [ 345.520235][T17048] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 18: comm syz.4.4129: lblock 23 mapped to illegal pblock 18 (length 1) [ 345.535029][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 345.559084][T17048] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz.4.4129: path /root/syzkaller.t5Pd7S/82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 345.561637][T16971] veth0_macvtap: entered promiscuous mode [ 345.622821][T16971] veth1_macvtap: entered promiscuous mode [ 345.638042][T16660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.648000][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.658638][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.668570][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.679044][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.688867][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.699352][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.709179][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.719647][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.729514][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.739952][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.823329][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.848799][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.859320][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.869171][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.879578][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.889497][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.899999][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.909887][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.920339][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.960015][T15522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.967300][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.997847][T16971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.006808][T16971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.015722][T16971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.024410][T16971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.495791][T17096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4140'. [ 346.532798][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 346.532811][ T29] audit: type=1326 audit(1719759465.229:14270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17094 comm="syz.1.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 346.563885][ T29] audit: type=1326 audit(1719759465.259:14271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17094 comm="syz.1.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 346.587525][ T29] audit: type=1326 audit(1719759465.259:14272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17094 comm="syz.1.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 346.611437][ T29] audit: type=1326 audit(1719759465.259:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17094 comm="syz.1.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 346.635119][ T29] audit: type=1326 audit(1719759465.259:14274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17094 comm="syz.1.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 346.666645][ T29] audit: type=1326 audit(1719759465.369:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17094 comm="syz.1.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 346.690283][ T29] audit: type=1326 audit(1719759465.369:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17094 comm="syz.1.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 346.719537][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4141'. [ 346.740163][T17101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.747441][T17101] IPv6: NLM_F_CREATE should be set when creating new route [ 347.353446][T17093] delete_channel: no stack [ 347.743643][ T29] audit: type=1326 audit(1719759466.439:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17131 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 347.802851][ T29] audit: type=1326 audit(1719759466.469:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17131 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 347.802915][ T29] audit: type=1326 audit(1719759466.469:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17131 comm="syz.1.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c3093b99 code=0x7ffc0000 [ 347.947130][T17138] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4155'. [ 348.367338][T17152] syzkaller0: entered promiscuous mode [ 348.372836][T17152] syzkaller0: entered allmulticast mode [ 349.076416][T17177] loop2: detected capacity change from 0 to 2048 [ 349.116957][T17177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.145571][T17177] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.4168: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 349.223524][T16660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.344496][T17182] netlink: 'syz.3.4169': attribute type 39 has an invalid length. [ 349.363862][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.371170][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.612570][T17192] loop2: detected capacity change from 0 to 1024 [ 349.624717][T17192] EXT4-fs: Ignoring removed orlov option [ 349.630491][T17192] EXT4-fs: Ignoring removed oldalloc option [ 349.645028][T17192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.653631][T17192] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 349.664510][T17192] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 349.684669][T17192] EXT4-fs (loop2): invalid journal inode [ 349.684755][T17192] EXT4-fs (loop2): can't get journal size [ 349.686324][T17192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.972679][T17201] program syz.4.4175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.009674][T16660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.108967][T17204] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.268305][T17212] loop4: detected capacity change from 0 to 512 [ 350.296152][T17212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.332577][T17212] ext4 filesystem being mounted at /root/syzkaller.t5Pd7S/89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.457138][T17212] loop4: detected capacity change from 512 to 0 [ 350.469998][T17212] bio_check_eod: 32 callbacks suppressed [ 350.470011][T17212] syz.4.4178: attempt to access beyond end of device [ 350.470011][T17212] loop4: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 350.494774][T17212] EXT4-fs error (device loop4): __ext4_find_entry:1684: inode #2: comm syz.4.4178: reading directory lblock 0 [ 350.518556][T17219] dccp_close: ABORT with 11 bytes unread [ 350.530383][T17212] syz.4.4178: attempt to access beyond end of device [ 350.530383][T17212] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 350.543738][T17212] buffer_io_error: 7 callbacks suppressed [ 350.543750][T17212] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 350.586182][T17212] EXT4-fs (loop4): I/O error while writing superblock [ 350.594056][T17221] syz.4.4178: attempt to access beyond end of device [ 350.594056][T17221] loop4: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 350.632878][T17221] EXT4-fs error (device loop4): __ext4_find_entry:1684: inode #2: comm syz.4.4178: reading directory lblock 0 [ 350.645290][T17221] syz.4.4178: attempt to access beyond end of device [ 350.645290][T17221] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 350.658517][T17221] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 350.669235][T17221] EXT4-fs (loop4): I/O error while writing superblock [ 350.676964][T17220] syz.4.4178: attempt to access beyond end of device [ 350.676964][T17220] loop4: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 350.712383][T17221] syz.4.4178: attempt to access beyond end of device [ 350.712383][T17221] loop4: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 350.754804][T17220] EXT4-fs error (device loop4): __ext4_find_entry:1684: inode #2: comm syz.4.4178: reading directory lblock 0 [ 350.786580][T17220] syz.4.4178: attempt to access beyond end of device [ 350.786580][T17220] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 350.799900][T17220] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 350.801218][T17221] EXT4-fs error (device loop4): __ext4_find_entry:1684: inode #2: comm syz.4.4178: reading directory lblock 0 [ 350.820322][T17221] EXT4-fs (loop4): previous I/O error to superblock detected [ 350.827782][T17221] syz.4.4178: attempt to access beyond end of device [ 350.827782][T17221] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 350.841255][T17221] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 350.852145][T17221] EXT4-fs (loop4): I/O error while writing superblock [ 350.883983][T17212] syz.4.4178: attempt to access beyond end of device [ 350.883983][T17212] loop4: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 350.909791][T17212] EXT4-fs error (device loop4): __ext4_find_entry:1684: inode #2: comm syz.4.4178: reading directory lblock 0 [ 350.923542][T17212] syz.4.4178: attempt to access beyond end of device [ 350.923542][T17212] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 350.937011][T17212] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 350.946222][T17212] EXT4-fs (loop4): I/O error while writing superblock [ 350.981067][ T8102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.048120][ T8102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.130732][ T8102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.196757][T15522] EXT4-fs error (device loop4): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 351.215103][ T8102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.244994][T15522] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 351.266126][T15522] EXT4-fs (loop4): I/O error while writing superblock [ 351.272951][T15522] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: IO failure [ 351.302014][T15522] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 351.325713][T15522] EXT4-fs (loop4): I/O error while writing superblock [ 351.332532][T15522] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 351.344174][ T8102] bridge_slave_1: left allmulticast mode [ 351.349901][ T8102] bridge_slave_1: left promiscuous mode [ 351.355595][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.374799][T15522] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 351.383065][T15522] EXT4-fs (loop4): I/O error while writing superblock [ 351.400028][T17250] loop2: detected capacity change from 0 to 512 [ 351.409167][ T8102] bridge_slave_0: left allmulticast mode [ 351.414891][ T8102] bridge_slave_0: left promiscuous mode [ 351.420738][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.445054][ T8083] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #3: block 34: comm kworker/u8:25: unable to read itable block [ 351.485196][ T8083] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 351.493521][ T8083] EXT4-fs (loop4): I/O error while writing superblock [ 351.513184][ T8083] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:25: unable to read itable block [ 351.544658][ T8083] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 351.609647][ T8102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.636710][ T8102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.667128][ T8102] bond0 (unregistering): Released all slaves [ 351.837584][ T8102] hsr_slave_0: left promiscuous mode [ 351.843525][ T8102] hsr_slave_1: left promiscuous mode [ 351.856935][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.864322][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.874911][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.882290][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.909032][ T8102] veth1_macvtap: left promiscuous mode [ 351.914505][ T8102] veth0_macvtap: left promiscuous mode [ 351.920107][ T8102] veth1_vlan: left promiscuous mode [ 351.925336][ T8102] veth0_vlan: left promiscuous mode [ 352.180537][ T8102] team0 (unregistering): Port device team_slave_1 removed [ 352.228152][ T8102] team0 (unregistering): Port device team_slave_0 removed [ 352.319810][T17277] loop3: detected capacity change from 0 to 256 [ 352.338192][T17234] chnl_net:caif_netlink_parms(): no params data found [ 352.461605][T17234] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.468712][T17234] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.477181][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 352.477273][ T29] audit: type=1326 audit(1719759471.179:14319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17272 comm="syz.3.4193" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad467a6b99 code=0x0 [ 352.531565][T17234] bridge_slave_0: entered allmulticast mode [ 352.538401][T17234] bridge_slave_0: entered promiscuous mode [ 352.547915][T17234] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.555118][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.564066][T17234] bridge_slave_1: entered allmulticast mode [ 352.570995][T17234] bridge_slave_1: entered promiscuous mode [ 352.618500][T17234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.638943][T17234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.688547][T17234] team0: Port device team_slave_0 added [ 352.728927][T17234] team0: Port device team_slave_1 added [ 352.780866][T17234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.787903][T17234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.813868][T17234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.852762][ T8102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.863143][ T8102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.896520][T17234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.903486][T17234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.929892][T17234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.965588][ T29] audit: type=1400 audit(1719759471.649:14320): avc: denied { write } for pid=17297 comm="syz.2.4200" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 353.001761][T17268] chnl_net:caif_netlink_parms(): no params data found [ 353.021395][ T8102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.031709][ T8102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.102463][T17234] hsr_slave_0: entered promiscuous mode [ 353.110429][T17234] hsr_slave_1: entered promiscuous mode [ 353.150086][ T8102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.160417][ T8102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.272020][ T8102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.282329][ T8102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.318000][T17268] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.325199][T17268] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.342045][T17268] bridge_slave_0: entered allmulticast mode [ 353.355396][T17268] bridge_slave_0: entered promiscuous mode [ 353.375496][T17268] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.382725][T17268] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.404930][T17268] bridge_slave_1: entered allmulticast mode [ 353.425886][T17268] bridge_slave_1: entered promiscuous mode [ 353.474553][T17268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.526583][T17268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.552089][ T8102] bridge_slave_1: left allmulticast mode [ 353.557784][ T8102] bridge_slave_1: left promiscuous mode [ 353.563470][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.587186][ T8102] bridge_slave_0: left allmulticast mode [ 353.592942][ T8102] bridge_slave_0: left promiscuous mode [ 353.598631][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.666019][T17323] loop2: detected capacity change from 0 to 164 [ 353.768152][ T8102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.788256][ T8102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.817809][ T8102] bond0 (unregistering): Released all slaves [ 353.859966][T17268] team0: Port device team_slave_0 added [ 353.887296][T17268] team0: Port device team_slave_1 added [ 353.957613][T17268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.964569][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.990515][T17268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.055576][T17268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.062564][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.088521][T17268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.184762][ T8102] hsr_slave_0: left promiscuous mode [ 354.196477][ T8102] hsr_slave_1: left promiscuous mode [ 354.225188][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.232679][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.272561][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.280041][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.322425][ T8102] veth1_macvtap: left promiscuous mode [ 354.327991][ T8102] veth0_macvtap: left promiscuous mode [ 354.333503][ T8102] veth1_vlan: left promiscuous mode [ 354.338821][ T8102] veth0_vlan: left promiscuous mode [ 354.615971][ T8102] team0 (unregistering): Port device team_slave_1 removed [ 354.647148][ T8102] team0 (unregistering): Port device team_slave_0 removed [ 354.686760][ T8102] smc: removing net device bridge_slave_0 with user defined pnetid SYZ1 [ 354.759776][T17336] @: renamed from bond0 (while UP) [ 354.797909][T17268] hsr_slave_0: entered promiscuous mode [ 354.815986][T17268] hsr_slave_1: entered promiscuous mode [ 354.828318][T17268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.847689][T17268] Cannot create hsr debugfs directory [ 354.881154][T17234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.903632][T17234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.913387][T17234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.932155][T17234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.116856][T17234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.137629][T17344] netlink: 'syz.0.4213': attribute type 1 has an invalid length. [ 355.171359][T17344] bond0: entered promiscuous mode [ 355.190303][T17234] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.218034][T17346] lo: entered promiscuous mode [ 355.235009][T17346] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 355.298929][T17346] bond0: (slave lo): making interface the new active one [ 355.327824][T17346] bond0: (slave lo): Enslaving as an active interface with an up link [ 355.357413][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.364485][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.396673][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.403802][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.443025][T17234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.453401][T17234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.526949][T17268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.578004][T17268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.603234][T17234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.619363][T17268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.638311][T17268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.706218][T17355] netlink: 'syz.3.4214': attribute type 10 has an invalid length. [ 355.750709][T17355] team0: Port device syz_tun added [ 355.865557][T17234] veth0_vlan: entered promiscuous mode [ 355.889103][T17234] veth1_vlan: entered promiscuous mode [ 355.908758][T17268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.950799][T17234] veth0_macvtap: entered promiscuous mode [ 355.971191][T17268] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.012753][T17234] veth1_macvtap: entered promiscuous mode [ 356.034419][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.041588][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.086110][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.093252][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.174679][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.185393][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.195387][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.205855][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.215699][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.226139][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.236003][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.246452][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.260037][T17234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.286970][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.297558][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.307464][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.317912][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.327815][T17234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.338582][T17234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.367670][T17234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.438906][T17268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.466535][T17234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.475311][T17234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.484065][T17234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.492959][T17234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.505232][T17385] loop3: detected capacity change from 0 to 512 [ 356.618214][T17385] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.672744][T17385] EXT4-fs (loop3): 1 truncate cleaned up [ 356.729172][T17385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.790828][T17268] veth0_vlan: entered promiscuous mode [ 356.839568][T17268] veth1_vlan: entered promiscuous mode [ 356.908433][T17268] veth0_macvtap: entered promiscuous mode [ 356.927989][T17268] veth1_macvtap: entered promiscuous mode [ 356.980530][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.990995][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.000825][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.011428][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.021241][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.031813][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.041779][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.052370][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.062185][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.074869][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.088616][T17268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.100727][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4221'. [ 357.113841][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.124483][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.134379][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.144940][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.154777][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.165233][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.175152][T17268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.185747][T17268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.200241][T17268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.210751][T17268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.219655][T17268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.228703][T17268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.237581][T17268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.307673][T16796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.195380][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4229'. [ 358.667991][T17446] pim6reg1: entered promiscuous mode [ 358.673349][T17446] pim6reg1: entered allmulticast mode [ 360.611742][T17487] xt_NFQUEUE: number of total queues is 0 [ 360.634808][T17488] xt_NFQUEUE: number of total queues is 0 [ 361.572891][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.580446][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.588021][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.595497][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.602868][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.610282][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.617735][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.625141][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.632578][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.639961][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.647493][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.655069][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.662473][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.669877][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.677256][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.684637][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.692034][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.699460][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.706863][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.714293][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.721679][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.729079][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.736513][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.743891][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.751346][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.758826][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.766247][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.773630][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.781086][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.788483][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.795887][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.803258][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.810813][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.818239][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.825631][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.833004][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.840469][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.847868][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.855398][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.862776][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.870156][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.877594][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 361.887704][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 362.222819][ T35] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 362.515712][T17516] program syz.4.4255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.543831][T17518] program syz.1.4257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.576402][T17518] program syz.1.4257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.746862][T17525] netlink: 'syz.0.4259': attribute type 1 has an invalid length. [ 362.771693][T17525] bond1: entered promiscuous mode [ 362.787039][T17526] netlink: 'syz.0.4259': attribute type 1 has an invalid length. [ 362.813650][T17525] bond1: (slave ip6gretap1): making interface the new active one [ 362.821546][T17525] ip6gretap1: entered promiscuous mode [ 362.867846][T17525] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 362.877017][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4259'. [ 362.885976][T17526] bond1: left promiscuous mode [ 362.890775][T17526] ip6gretap1: left promiscuous mode [ 362.924802][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4259'. [ 362.945604][T17525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4259'. [ 362.994204][T17526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4259'. [ 363.733622][T17545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4265'. [ 363.767855][T17545] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.794058][T17545] bridge_slave_0 (unregistering): left allmulticast mode [ 363.801288][T17545] bridge_slave_0 (unregistering): left promiscuous mode [ 363.808345][T17545] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.149814][ T8085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.233106][ T8085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.308683][ T8085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.364661][T17549] chnl_net:caif_netlink_parms(): no params data found [ 364.395050][ T8085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.495095][T17549] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.502202][T17549] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.511904][T17549] bridge_slave_0: entered allmulticast mode [ 364.519765][T17549] bridge_slave_0: entered promiscuous mode [ 364.539319][ T8085] bridge_slave_1: left allmulticast mode [ 364.545083][ T8085] bridge_slave_1: left promiscuous mode [ 364.551002][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.561335][ T8085] bridge_slave_0: left allmulticast mode [ 364.567052][ T8085] bridge_slave_0: left promiscuous mode [ 364.572716][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.760922][ T8085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.779142][ T8085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.793576][ T8085] bond0 (unregistering): Released all slaves [ 364.799864][T17575] loop1: detected capacity change from 0 to 1024 [ 364.810309][T17549] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.817391][T17549] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.838157][T17549] bridge_slave_1: entered allmulticast mode [ 364.843337][T17575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.848035][T17549] bridge_slave_1: entered promiscuous mode [ 364.858109][T17575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.883728][T17579] program syz.0.4272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.904333][T17549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.917628][T17549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.952878][T17549] team0: Port device team_slave_0 added [ 364.972187][T17549] team0: Port device team_slave_1 added [ 365.007067][ T8085] hsr_slave_0: left promiscuous mode [ 365.022477][ T8085] hsr_slave_1: left promiscuous mode [ 365.028572][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.036099][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.063022][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.070584][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.093540][ T8085] veth1_macvtap: left promiscuous mode [ 365.099105][ T8085] veth0_macvtap: left promiscuous mode [ 365.104760][ T8085] veth1_vlan: left promiscuous mode [ 365.110076][ T8085] veth0_vlan: left promiscuous mode [ 365.196958][ T29] audit: type=1400 audit(1719759483.899:14321): avc: denied { getopt } for pid=17583 comm="syz.1.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.302717][ T8085] team0 (unregistering): Port device team_slave_1 removed [ 365.325461][ T8085] team0 (unregistering): Port device team_slave_0 removed [ 365.402471][T17549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.409474][T17549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.435401][T17549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.466469][T17549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.473870][T17549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.499831][T17549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.546703][T17588] wg2: entered allmulticast mode [ 365.584265][T17549] hsr_slave_0: entered promiscuous mode [ 365.609386][T17549] hsr_slave_1: entered promiscuous mode [ 365.626831][T17549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.634379][T17549] Cannot create hsr debugfs directory [ 366.012046][T17549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.030373][T17549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 366.047899][T17549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.071871][T17549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.168347][T17549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.185240][T17606] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4282'. [ 366.199799][T17549] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.230680][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.237788][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.292918][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.300082][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.335611][T17549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.398167][T17606] loop4: detected capacity change from 0 to 8192 [ 366.458675][T17606] loop4: p1 < > p4 < > [ 366.469152][T17549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.541155][T17620] vxcan1: MTU too low for tipc bearer [ 366.546687][T17620] tipc: Enabling of bearer rejected, failed to enable media [ 366.666771][T17549] veth0_vlan: entered promiscuous mode [ 366.686373][T17549] veth1_vlan: entered promiscuous mode [ 366.741927][T17549] veth0_macvtap: entered promiscuous mode [ 366.766947][T17549] veth1_macvtap: entered promiscuous mode [ 366.804300][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.814861][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.824798][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.835379][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.845423][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.855874][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.865827][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.876403][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.886230][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.896673][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.939722][T17549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.960914][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.971399][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.981213][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.991716][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.001577][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.012512][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.022599][T17549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.033107][T17549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.219661][T17632] hub 6-0:1.0: USB hub found [ 367.224380][T17632] hub 6-0:1.0: 8 ports detected [ 367.509243][T17549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.519251][T17549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.528059][T17549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.536788][T17549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.545550][T17549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.746742][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 367.772371][T17639] 9pnet_fd: Insufficient options for proto=fd [ 367.793723][T17639] loop2: detected capacity change from 0 to 1024 [ 367.821842][T17639] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.834489][T17639] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 367.854798][T17639] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 367.882211][T17639] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #4: comm syz.2.4266: blocks 32-33 from inode overlap system zone [ 367.905406][T17639] EXT4-fs (loop2): failed to initialize system zone (-117) [ 367.912755][T17639] EXT4-fs (loop2): mount failed [ 367.965678][T17639] bond1: entered promiscuous mode [ 367.970773][T17639] bond1: entered allmulticast mode [ 367.984898][T17639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.006288][T17639] bond1 (unregistering): Released all slaves [ 368.718017][T17669] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4300'. [ 369.026954][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 369.912272][T17695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=17695 comm=syz.1.4309 [ 370.044179][T17699] loop3: detected capacity change from 0 to 164 [ 370.073239][T17699] Unable to read rock-ridge attributes [ 370.078789][T17699] isofs_fill_super: root inode is not a directory. Corrupted media? [ 370.225198][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 370.373574][T17707] loop1: detected capacity change from 0 to 512 [ 370.399429][T17707] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 370.418186][T17707] EXT4-fs (loop1): 1 truncate cleaned up [ 370.425622][T17707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.499709][T17234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.113227][T17734] dummy0: entered promiscuous mode [ 371.302943][T17734] loop1: detected capacity change from 0 to 8192 [ 371.337408][T17734] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 371.536533][T17739] loop3: detected capacity change from 0 to 512 [ 371.591367][T17739] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 371.599765][T17739] EXT4-fs (loop3): orphan cleanup on readonly fs [ 371.608167][T17739] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 371.642006][T17739] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 371.683028][T17739] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.4323: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 371.703107][T17739] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4323: couldn't read orphan inode 13 (err -117) [ 371.718628][T17739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.742218][T17739] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 371.756006][T17739] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 371.775761][T17739] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 371.807786][T17739] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 371.829998][T17739] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 371.855839][T17739] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 371.990795][T16796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.387963][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 373.180842][T17798] loop4: detected capacity change from 0 to 256 [ 373.234378][T17798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4343'. [ 373.282534][ T29] audit: type=1400 audit(1719759491.979:14322): avc: denied { ioctl } for pid=17797 comm="syz.4.4343" path="socket:[69989]" dev="sockfs" ino=69989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 374.063463][T17827] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4349'. [ 374.097128][T17827] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4349'. [ 374.287336][T17833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4351'. [ 374.412948][T17836] loop4: detected capacity change from 0 to 1024 [ 374.458666][T17836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.480231][T17836] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 374.498929][T17836] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 374.529969][T17836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.659313][T17268] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 374.705438][T17268] EXT4-fs error (device loop4): __ext4_iget:4906: inode #15: block 1803188595: comm syz-executor: invalid block [ 374.740996][T17268] EXT4-fs error (device loop4): __ext4_iget:4906: inode #15: block 1803188595: comm syz-executor: invalid block [ 375.005520][T17268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.417474][T17853] chnl_net:caif_netlink_parms(): no params data found [ 375.483896][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.491635][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.523450][T17853] bridge_slave_0: entered allmulticast mode [ 375.544955][T17853] bridge_slave_0: entered promiscuous mode [ 375.558912][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.566070][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.579084][T17853] bridge_slave_1: entered allmulticast mode [ 375.595293][T17853] bridge_slave_1: entered promiscuous mode [ 375.634693][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.671734][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.736029][T17853] team0: Port device team_slave_0 added [ 375.748438][T17853] team0: Port device team_slave_1 added [ 375.782653][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.789744][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.815690][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.836336][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.843294][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.869323][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.950624][T16796] team0: Port device syz_tun removed [ 376.008603][T17853] hsr_slave_0: entered promiscuous mode [ 376.025446][T17853] hsr_slave_1: entered promiscuous mode [ 376.042425][T17853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.050044][T17853] Cannot create hsr debugfs directory [ 376.387986][T17853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.467674][T17853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.564184][T17853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.644407][T17853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.790132][T17853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 376.824492][T17853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 376.845001][T17853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 376.871804][T17853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 376.894621][T17892] chnl_net:caif_netlink_parms(): no params data found [ 377.007789][T17892] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.015348][T17892] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.037502][T17892] bridge_slave_0: entered allmulticast mode [ 377.052841][T17892] bridge_slave_0: entered promiscuous mode [ 377.077507][T17892] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.084589][T17892] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.112482][T17892] bridge_slave_1: entered allmulticast mode [ 377.130654][T17892] bridge_slave_1: entered promiscuous mode [ 377.202113][T17892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.225246][T17853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.243707][T17892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.272344][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.327259][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.334496][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.343669][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.350843][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.362822][T17892] team0: Port device team_slave_0 added [ 377.383084][T17892] team0: Port device team_slave_1 added [ 377.435903][T17892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.442858][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.469019][T17892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.567064][T17892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.574135][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.600178][T17892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.753328][T17892] hsr_slave_0: entered promiscuous mode [ 377.794713][T17892] hsr_slave_1: entered promiscuous mode [ 377.828129][T17892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.853273][T17892] Cannot create hsr debugfs directory [ 377.870433][T17853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.051338][T17892] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.148535][T17892] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.292956][T17892] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.326091][T17853] veth0_vlan: entered promiscuous mode [ 378.342240][T17853] veth1_vlan: entered promiscuous mode [ 378.384318][T17853] veth0_macvtap: entered promiscuous mode [ 378.405449][T17892] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.449628][T17853] veth1_macvtap: entered promiscuous mode [ 378.470874][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.481343][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.491187][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.501876][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.511688][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.522110][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.532052][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.542480][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.552326][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.562800][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.572625][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.583119][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.612235][T17853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.640284][T17892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 378.651554][T17892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.661683][T17892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 378.673761][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.684359][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.694233][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.704690][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.714522][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.725018][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.734896][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.745475][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.755308][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.765832][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.778327][T17853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.787164][T17853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.795922][T17853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.804613][T17853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.813388][T17853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.827957][T17892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.979463][T17892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.023026][T17892] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.066289][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.073444][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.108308][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.115404][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.142999][T17892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.249015][T17892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.348452][T17892] veth0_vlan: entered promiscuous mode [ 379.366097][T17892] veth1_vlan: entered promiscuous mode [ 379.368501][T17990] loop1: detected capacity change from 0 to 512 [ 379.382484][T17892] veth0_macvtap: entered promiscuous mode [ 379.398654][T17892] veth1_macvtap: entered promiscuous mode [ 379.422392][T17992] loop2: detected capacity change from 0 to 512 [ 379.431271][T17990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.437379][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.443993][T17990] ext4 filesystem being mounted at /root/syzkaller.q8hThF/44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.454251][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.454274][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.454305][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.454319][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.454333][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.454347][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.454364][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.454379][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.454391][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.454406][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.454417][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.454467][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.454480][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.496098][T17892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.609627][T17992] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 379.621898][T17992] EXT4-fs (loop2): 1 truncate cleaned up [ 379.636448][T17992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.651763][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 379.711876][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 379.738687][T17549] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.748957][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.759441][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.769942][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.780439][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.790258][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.801258][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.811165][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.821643][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.832031][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.842600][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.852515][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.863553][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.877711][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 379.920398][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 379.937581][T17892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.956042][T17892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.964903][T17892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.973656][T17892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.983138][T17892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.989072][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 380.039165][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 380.064419][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 380.088410][T17990] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 18: comm syz.1.4387: lblock 23 mapped to illegal pblock 18 (length 1) [ 380.104977][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 380.129508][T17990] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.4387: path /root/syzkaller.q8hThF/44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 380.223182][T18001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4371'. [ 380.252816][T17234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.262009][ T3331] IPVS: starting estimator thread 0... [ 380.375773][T18003] IPVS: using max 2880 ests per chain, 144000 per kthread [ 381.084231][T18037] loop1: detected capacity change from 0 to 512 [ 381.138255][T18037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 381.175616][T18040] loop2: detected capacity change from 0 to 512 [ 381.184896][T18037] EXT4-fs (loop1): 1 truncate cleaned up [ 381.191232][T18037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.257729][T18040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.308812][T18040] ext4 filesystem being mounted at /root/syzkaller.IrILVF/20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.322449][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 381.348754][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 381.396620][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 381.422867][T17234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.440332][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 381.486833][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 381.510661][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 381.535889][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 381.562586][T18040] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 18: comm syz.2.4402: lblock 23 mapped to illegal pblock 18 (length 1) [ 381.590606][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 19: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 381.636831][T18040] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 20: comm syz.2.4402: path /root/syzkaller.IrILVF/20/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 382.115843][T17549] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.267375][T18054] loop3: detected capacity change from 0 to 512 [ 382.764121][ T29] audit: type=1400 audit(1719759501.459:14323): avc: denied { nosuid_transition } for pid=18089 comm=2321200A5C43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 382.786014][ T29] audit: type=1400 audit(1719759501.459:14324): avc: denied { entrypoint } for pid=18089 comm=2321200A5C43 path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="tmpfs" ino=1582 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 382.990201][T18102] loop1: detected capacity change from 0 to 512 [ 383.030215][T18102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.059500][T18102] ext4 filesystem being mounted at /root/syzkaller.q8hThF/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.076975][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 383.120523][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 383.176232][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 383.218574][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 383.259149][T18109] netlink: 'syz.0.4419': attribute type 1 has an invalid length. [ 383.267238][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 383.304421][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 383.350282][T18110] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 383.369639][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 383.400906][T18102] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 18: comm syz.1.4417: lblock 23 mapped to illegal pblock 18 (length 1) [ 383.425740][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 383.458338][T18102] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.4417: path /root/syzkaller.q8hThF/51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 383.892033][T17234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.980346][ T29] audit: type=1400 audit(1719759502.679:14325): avc: denied { create } for pid=18125 comm="syz.4.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.014960][ T29] audit: type=1400 audit(1719759502.699:14326): avc: denied { setopt } for pid=18125 comm="syz.4.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 384.235689][T18147] loop3: detected capacity change from 0 to 512 [ 384.269594][T18147] EXT4-fs: Ignoring removed mblk_io_submit option [ 384.296269][T18147] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 384.322010][T18147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 384.346378][T18147] System zones: 1-12 [ 384.355026][T18147] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.4429: corrupted in-inode xattr: e_value size too large [ 384.372898][T18147] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4429: couldn't read orphan inode 15 (err -117) [ 384.451265][T18147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.479308][ T29] audit: type=1400 audit(1719759503.169:14327): avc: denied { listen } for pid=18149 comm="syz.0.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 384.836494][T17892] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.880484][T18176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4435'. [ 384.926940][T18176] loop4: detected capacity change from 0 to 512 [ 384.957531][T18176] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 384.998060][T18176] EXT4-fs (loop4): orphan cleanup on readonly fs [ 385.017627][T18176] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.4435: bad orphan inode 15 [ 385.055893][T18176] ext4_test_bit(bit=14, block=18) = 1 [ 385.061302][T18176] is_bad_inode(inode)=0 [ 385.065528][T18176] NEXT_ORPHAN(inode)=1023 [ 385.069843][T18176] max_ino=32 [ 385.073078][T18176] i_nlink=0 [ 385.124943][T18176] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.4435: corrupted xattr block 19: e_value size too large [ 385.156611][T18176] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 385.166733][ T29] audit: type=1400 audit(1719759503.859:14328): avc: denied { write } for pid=18181 comm="syz.1.4439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.194529][T18176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 385.239134][T17853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.596724][T18196] loop1: detected capacity change from 0 to 128 [ 385.621820][T18196] FAT-fs (loop1): Unrecognized mount option "syzkaller" or missing value [ 385.880588][T18204] xt_CT: No such helper "syz0" [ 385.890321][T18206] ================================================================== [ 385.898401][T18206] BUG: KCSAN: data-race in __d_instantiate / step_into [ 385.905256][T18206] [ 385.907569][T18206] write to 0xffff8881063f9ab0 of 8 bytes by task 18207 on cpu 1: [ 385.915281][T18206] __d_instantiate+0x1f9/0x3c0 [ 385.920047][T18206] d_instantiate_new+0x5c/0xf0 [ 385.924805][T18206] ext4_add_nondir+0x16c/0x1a0 [ 385.929570][T18206] ext4_symlink+0x4dd/0x5a0 [ 385.934075][T18206] vfs_symlink+0xca/0x1d0 [ 385.938410][T18206] do_symlinkat+0xe3/0x350 [ 385.942825][T18206] __x64_sys_symlink+0x56/0x70 [ 385.947592][T18206] x64_sys_call+0x14d2/0x2d70 [ 385.952271][T18206] do_syscall_64+0xc9/0x1c0 [ 385.956780][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.962673][T18206] [ 385.964986][T18206] read to 0xffff8881063f9ab0 of 8 bytes by task 18206 on cpu 0: [ 385.972607][T18206] step_into+0x123/0x810 [ 385.976849][T18206] walk_component+0x169/0x230 [ 385.981530][T18206] path_lookupat+0x10a/0x2b0 [ 385.986113][T18206] filename_lookup+0x127/0x300 [ 385.990869][T18206] user_path_at_empty+0x42/0x120 [ 385.995803][T18206] __x64_sys_chmod+0x6b/0x120 [ 386.000478][T18206] x64_sys_call+0x86c/0x2d70 [ 386.005066][T18206] do_syscall_64+0xc9/0x1c0 [ 386.009569][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.015460][T18206] [ 386.017774][T18206] value changed: 0x0000000000000000 -> 0xffff88811149ca48 [ 386.024866][T18206] [ 386.027177][T18206] Reported by Kernel Concurrency Sanitizer on: [ 386.033325][T18206] CPU: 0 PID: 18206 Comm: syz.0.4449 Tainted: G W 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 386.044952][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 386.055002][T18206] ================================================================== [ 386.167428][T18218] program syz.2.4451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.181194][ T29] audit: type=1400 audit(1719759504.879:14329): avc: denied { getopt } for pid=18216 comm="syz.2.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1