last executing test programs: 7m32.871431739s ago: executing program 32 (id=235): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1, @private=0xa010101}, 0x10) 7m30.94454105s ago: executing program 33 (id=276): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xffffffffffffffec}) 7m27.497412055s ago: executing program 34 (id=337): pipe(&(0x7f0000000480)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x5) 6m55.878397943s ago: executing program 35 (id=1064): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3, @rand_addr=0x64010102}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6m51.139519423s ago: executing program 36 (id=1133): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)="f719", 0x2, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x80, 0x9, 0x1, 0xfa, 0xa, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 6m44.203202768s ago: executing program 37 (id=1285): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX], 0x4, 0x1296, &(0x7f0000001b80)="$eJzs3c9rY0UcAPBv2nQ37bpN1XV1F8RBL4qQ3fbgyUuRXRArSrULKghvbaoh6Q+aUEgRt548Cf4Zoh69CeI/0IsXz4Ig0ovHPYhP2qRr0/SX/Qny+VwyzMx35jud18ALb3gbr341X59rVuayVgwUClFcGoriwxQpBmIwOtbipXu//PrsO++9/8bk1NSd6ZTuTr47/kpKafS5Hz/49Lvnf2pduff96A+XY31sYOPPid/Wr6/f2Pj726g1U62ZFhZbKUv3Fxdb2f1GNc3WmvVKSm83qlmzmmoLzepyT/tcY3FpqZ2yhdmrI0vL1WYzZQvtVK+2U6uQWsvtlH2c1RZSpVJJV0eCk5j55mGe5xF5PhSXIs/zfDhG4ko8FldjNMoxFo/HE/FkXIun4no8Hc/Eja1eF503AAAAAAAAAAAAAAAAAAAA/L8ccv6/4Pw/AAAAAAAAAAAAAAAAAAAAnL3d5/+LEd7/DwAAAAAAAAAAAAAAAAAAAOfskPf/7zr//7Lz/wAAAAAAAAAAAAAAAAAAAHAWSp2P6ZRKEfNfrMyszHQ+O/WTc1GLRlTjdpTjr9g6/d/RKd99ferO7bRlLG7NP+jGP1iZGeyNHx8qx1hhz/jx4YhIKfXGX46RnfETUY5re88/0Zl/V3wpXnxhM/7zTnwlyvHzR7EYjZiNKHRXvxX/2XhKr701Ndwbf3Oz374Gz3hbAAAA4DRV0iP99+9r3U6d9lJve6epe3+euj0LB/w+sOv+vBg3ixe1arY126v1rNGoLh+zcGn/cS6dbOS+QiEisthZMzry+/Tm5EccZ/tyO6V8dhQGjxF1/DSGDu5zgj2N4pH/mKv10lFSPfrudJNf212TlyN21Nz68M36oeP88fWOmlKc9nbvVRh4tNKB7mWWNdaOfLHFWp6faYZ9/4zD7dX65YOi9v/OKJzxdxLn599Nv+hMAAAAAAAAAAAA+C/2fPpvOCL6ngf8pK9m+/Hw3vD+kfef/ctzWCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+hs8cA") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r1, &(0x7f0000004d00)=ANY=[], 0xa) sendfile(r1, r0, 0x0, 0x40001) 6m28.932792203s ago: executing program 38 (id=1298): io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x126, @time={0xfffffff1, 0xfffffffe}, 0x0, {}, 0x2, 0x0, 0xf}) 6m3.117028324s ago: executing program 39 (id=2209): unshare(0x62040200) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 5m51.161835927s ago: executing program 40 (id=2471): r0 = socket(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc804, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1ff) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xf52}], 0x1, 0x100, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) 5m38.376192067s ago: executing program 41 (id=2749): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b) 4m28.211679978s ago: executing program 42 (id=4216): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 4m22.825739226s ago: executing program 43 (id=4298): memfd_create(0x0, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) write(0xffffffffffffffff, 0x0, 0x0) 4m4.830577145s ago: executing program 44 (id=4654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000a0000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) r2 = dup(r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000200), &(0x7f0000000280)=@tcp6=r2}, 0x20) 4m1.808209598s ago: executing program 45 (id=4713): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r1, r2, 0x1, 0x0) 4m0.946765682s ago: executing program 46 (id=4734): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 3m44.498108942s ago: executing program 47 (id=5059): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0xff}, 0x204, 0x0, 0x43a1bd78, 0x4, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getxattr(0x0, 0x0, 0x0, 0x0) 3m37.447336367s ago: executing program 48 (id=5165): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3m22.793350469s ago: executing program 49 (id=5456): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r1, r0, 0x0) recvmmsg(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000005640)=""/191, 0x3514}], 0x1}, 0x4}], 0x1, 0xc7dca51c736f71e5, 0x0) 3m5.345423087s ago: executing program 50 (id=5776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) sendto$inet6(r0, &(0x7f0000000180)="c2", 0x1, 0x4000000, 0x0, 0x0) 2m53.221570967s ago: executing program 51 (id=5994): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48) getdents(r2, &(0x7f0000000080)=""/39, 0x27) getdents(r2, 0xfffffffffffffffd, 0x58) 2m26.711809134s ago: executing program 52 (id=6411): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000240)=[{r1, 0x610a}, {r1, 0x1600}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m23.705314965s ago: executing program 53 (id=6456): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) sendmsg$inet(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x80) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 2m14.500541538s ago: executing program 54 (id=6532): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa11000c3985a8207010000f8ffffffb702000008000000b703000000000000850001080600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m6.234231586s ago: executing program 4 (id=6672): add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000006dc0)=@newchain={0xe88, 0x64, 0x300, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x3, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x7, 0x7, 0x9, 0x1}, 0xf1, 0x2}, [{0x2, 0xffffffff, 0x752b, 0x9, 0x5, 0x2}, {0x6507b03b, 0x1, 0x7, 0xfffffffe, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x8a, 0x6, 0x2}, {0x7, 0x1200000, 0x88d, 0x2, 0x4, 0x2}, {0xffff5cff, 0x4, 0x0, 0x1, 0x40, 0x8001}, {0x6, 0x9, 0x400003, 0x0, 0x8, 0xf}, {0x5, 0x6, 0x2, 0x2, 0x3, 0x3}, {0x9, 0x7fffffff, 0x39cbefbf, 0x3, 0x3, 0x8}, {0x6, 0x0, 0xf, 0x1, 0x9, 0x1000}, {0x80000000, 0xffff, 0x4, 0x4, 0x80}, {0x3ff, 0x4, 0x3a14, 0x56d5, 0x2, 0x2}, {0x2, 0x2, 0x8, 0x7, 0xffffff81}, {0x3, 0xc9d, 0x3, 0x13ee, 0x4, 0x6}, {0x7fffffff, 0x1, 0x8, 0x4e80000, 0xf950, 0x9873}, {0x3772, 0x1182, 0x7, 0x6ae9, 0x79, 0xfb28}, {0x8, 0x6962, 0x0, 0x6, 0x4, 0x157}, {0x12968238, 0x0, 0xffffffff, 0x101, 0x0, 0x6}, {0x8, 0x9, 0xa68c, 0x2, 0x1, 0x80000000}, {0x1, 0x80000001, 0x8, 0x1000, 0x7, 0xa}, {0x6, 0x7, 0x9, 0x7fff, 0x6ffb, 0x7}, {0x2, 0x7bb, 0x10, 0xb70, 0x9, 0x9}, {0x6, 0x5, 0x80000000, 0x5, 0x40}, {0xfffff2e7, 0x7, 0x3, 0x7, 0xa2, 0xfffffff9}, {0x7, 0x2, 0xd, 0x5, 0x6, 0x7fffffff}, {0xb30, 0xfffffff8, 0xc767, 0x2, 0x3, 0x805a0}, {0xffff3594, 0x7, 0x8, 0x2, 0xfffff1f2, 0x4}, {0x4, 0x1, 0x3, 0x1ff, 0x3, 0x3ff}, {0xa0d0, 0xffffff30, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x8, 0x3d, 0x4, 0xfffffffd, 0xde0}, {0x6, 0x8, 0xfffffffc, 0x4, 0x80009, 0x10000}, {0x0, 0x80000000, 0x20000085, 0x9, 0x30ba, 0xfc}, {0x6, 0xffffffff, 0xf, 0x7, 0x7f, 0x1efb}, {0xfffffbff, 0x0, 0x3, 0xe8f6, 0x4, 0x98d}, {0x8, 0x7cd, 0x8, 0xff, 0x7, 0x1}, {0x5, 0x3, 0x7ff, 0x0, 0x2, 0x613}, {0x4, 0xfff, 0x4c3c, 0x5, 0x2, 0x2}, {0x8, 0x2, 0x0, 0xfffffffd, 0xdb1c, 0x3ff}, {0x5, 0xfffffffd, 0x8001, 0x81, 0x9, 0x1}, {0x3, 0x4175, 0x0, 0x2, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x9, 0x100, 0x2}, {0x7, 0x10, 0x0, 0x9, 0xdc}, {0xfffffffb, 0x8, 0xff, 0x6, 0x3, 0x8}, {0x5, 0xff, 0x401, 0x6, 0x7, 0x3}, {0x18, 0x1, 0x4, 0xfff, 0xa, 0x2}, {0x6, 0x9, 0xfffd, 0x3f, 0xab9, 0xfffffff5}, {0x7fffffff, 0x2, 0x94c, 0x9dee, 0xffff1483, 0x8}, {0x6fce8c73, 0x81, 0x7, 0x3ff, 0x0, 0x1}, {0x7fff, 0xad, 0x4, 0x0, 0x4, 0x7ff}, {0x1, 0xe364, 0x100, 0x9, 0x3, 0x2}, {0x5, 0x4, 0x80000000, 0x6, 0xb, 0x8}, {0xb95c, 0x80000001, 0x9, 0x6, 0xc, 0xb}, {0x3, 0x3, 0xc1, 0x0, 0x7f7, 0xfffff530}, {0x1, 0x0, 0x40, 0x2, 0x5}, {0x0, 0x3, 0x7, 0x82b, 0x0, 0x5}, {0xfff, 0x98, 0x6a4c, 0x101, 0x9, 0x40}, {0xffff, 0x7, 0x38, 0xb, 0x8, 0x8000}, {0x1, 0x0, 0x0, 0x6, 0x5, 0xf8}, {0x1, 0x6, 0xef0, 0x0, 0x101, 0x2}, {0x8, 0x7, 0x6f, 0x7, 0x6, 0x3}, {0x3f, 0x5, 0x3, 0x8, 0x9, 0x1}, {0x80000001, 0xfffffff9, 0x5, 0x800, 0x543, 0x1}, {0x22a, 0x201, 0x3, 0x0, 0x4, 0x7}, {0xad, 0x7, 0xfffffffa, 0x7b9, 0x164, 0x9}, {0x4, 0x7, 0x9, 0x7, 0x5, 0xc66}, {0x9, 0x3, 0x5, 0x3, 0x54, 0x6}, {0xf, 0x5, 0x9, 0x9, 0xe, 0x7}, {0x2a0d, 0x5, 0x4, 0x7, 0x9, 0x4}, {0x17, 0x200, 0xffff8001, 0x6, 0x62a, 0x4}, {0xc, 0x24000, 0x7f, 0x6b, 0x4, 0xd}, {0x7329e723, 0x4, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x80, 0x5821, 0x0, 0x5, 0x4}, {0x6, 0x3, 0x2, 0x7, 0x3, 0xcb14}, {0x7, 0x25b, 0x2, 0x6, 0x4, 0x9}, {0x8, 0x7, 0x4, 0xfffffffe, 0x7, 0x9}, {0x7, 0x4, 0x0, 0x648, 0x5, 0x100}, {0x1, 0x0, 0x59a0, 0x1, 0x7, 0x401}, {0x10000, 0x7ff, 0xfffffcca, 0xff, 0x8, 0x3}, {0x1, 0x4, 0x5, 0x7, 0x5}, {0x4, 0x2, 0x6, 0xd, 0x7, 0xb152}, {0x47, 0x9, 0x5, 0xfffffff9, 0x7fffffff, 0xa00000}, {0x4, 0x26c, 0x9, 0x8bab, 0xbc5d}, {0x1, 0x7, 0x5, 0x7, 0x8000, 0x40009}, {0x5f, 0x8, 0x5, 0x200, 0x8, 0x10001}, {0x8, 0x2, 0x80000000, 0x6, 0x101, 0x8}, {0x80000003, 0xfff, 0x10, 0xfffffff3, 0x8, 0x4}, {0x800, 0xffff, 0x5, 0x7, 0x344, 0x2b25}, {0x8, 0x7, 0x6, 0x1, 0x3, 0x8e02}, {0x1, 0x9e6, 0x8, 0x400, 0x6, 0x3}, {0x8, 0x0, 0x1, 0x7, 0x1, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x3, 0x4}, {0x6, 0xfffffec4, 0x200, 0x8, 0x8, 0x9}, {0x1, 0x8, 0x500, 0x400, 0xc52b, 0x4}, {0x9, 0x1, 0x100, 0xb6a, 0x9, 0x32b5}, {0x8, 0x1, 0x4, 0x0, 0xd73, 0x870}, {0xe08c, 0x7ff, 0x2, 0x6, 0x40, 0x9}, {0xffff, 0x4428, 0x3, 0x6, 0x8, 0x9}, {0x1000, 0x10001, 0x5, 0x4, 0x3, 0xb}, {0xfffff0aa, 0x9, 0xfffffffa, 0x5, 0x2, 0x4}, {0xd, 0xfffffff0, 0x4, 0x0, 0x8, 0x101}, {0xd, 0x3, 0x686, 0xfffffffa, 0x4, 0x4}, {0x7fff, 0x6, 0x200, 0x6, 0x4, 0x8}, {0x96, 0x6, 0x7, 0x7, 0x226, 0x8}, {0x6, 0x3, 0x5, 0x6, 0x7, 0xfff}, {0x3, 0xffffffff, 0x2, 0x568, 0x4, 0xffffffeb}, {0x2, 0x200, 0x2, 0x7, 0x6, 0x6}, {0x4, 0x566, 0x10001, 0xb, 0x4, 0x5594fdf3}, {0x423303a3, 0x9, 0x6, 0x3, 0x6, 0x3}, {0x100, 0x3, 0x0, 0x9, 0x8, 0x25}, {0x8, 0xd47, 0x0, 0x0, 0x6, 0x8f6d}, {0xff, 0x0, 0x0, 0x1, 0x7, 0xe}, {0xce1, 0x9, 0x0, 0x4, 0xffffffff, 0x200}, {0x4, 0xe, 0x3, 0x5e0, 0x8, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x4, 0x3}, {0x4f75, 0x8, 0x3c, 0xb, 0x4, 0x5}, {0x3, 0xd64, 0x1, 0x6, 0x8, 0x6}, {0x5, 0x401, 0x6, 0x4, 0x80, 0x640a525a}, {0x5, 0x0, 0x8, 0xfffffffe, 0xe, 0x6cd4}, {0x9, 0x0, 0x8, 0xa9ba, 0x100, 0x5}, {0x15, 0xfffffeff, 0x2, 0x5, 0x5fc0, 0xfffffff1}, {0x39d, 0x9, 0x1, 0x0, 0xfc, 0x7}, {0x6, 0xe69, 0xe, 0xffffff81, 0xbe7e, 0x401}, {0xfffffffa, 0x4, 0x0, 0x0, 0x6, 0xfffff001}, {0xcf2d, 0x8, 0x9176, 0x0, 0x4f, 0x1}, {0x0, 0x9, 0x5, 0xfff, 0x9030}, {0x4, 0x4, 0x800, 0x41e, 0x8000}, {0x6, 0xfffffffa, 0x0, 0x9a, 0x6, 0x8}, {0x3, 0xb, 0xf079, 0x7fffffff, 0x200, 0x1000407}, {0x65f, 0x100, 0x8, 0x1, 0x400, 0x2}], [{0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x649fb4c58d4cf3cc}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x1}, {0x2, 0xd2cd4f2f2bcaea07}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x8dafc58315d2bbb3}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x3}, {0x4, 0x9889dd74d1bcf2ee}, {0x1, 0x1}, {}, {0x3}, {}, {}, {0x3}, {0x3}, {0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m5.998664485s ago: executing program 4 (id=6676): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000540)=0x80000003, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, 0x0, 0x0) 2m5.952659073s ago: executing program 4 (id=6677): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m2.571447276s ago: executing program 4 (id=6730): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000976000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ebe000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m2.296780072s ago: executing program 4 (id=6735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b0000001801000020786c250000000000ff20207b1af8ff00000000bfa100000000000007"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000000080e2ff560000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m1.762728541s ago: executing program 4 (id=6741): socket$igmp6(0xa, 0x3, 0x2) fsopen(&(0x7f0000000080)='fuse\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) 2m1.697318262s ago: executing program 55 (id=6741): socket$igmp6(0xa, 0x3, 0x2) fsopen(&(0x7f0000000080)='fuse\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) 1m55.086297084s ago: executing program 0 (id=6819): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2, 0xe4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 1m54.993491689s ago: executing program 0 (id=6820): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r2, 0x9, 0x6, 0xb, 0x71, 0x7, 0x1200, 0x8, {0x0, @in6={{0xa, 0x4e21, 0xcb1, @loopback, 0x8001}}, 0x3, 0x1ff, 0x9, 0x2, 0x2}}, &(0x7f00000003c0)=0xb0) 1m54.135762332s ago: executing program 0 (id=6836): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1m54.000766574s ago: executing program 0 (id=6838): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x48) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) getdents(r0, 0x0, 0x0) 1m53.459389095s ago: executing program 0 (id=6850): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1m53.157511135s ago: executing program 0 (id=6859): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0x8f5, 0x0) close(r1) write(r2, 0x0, 0x0) 1m53.110637393s ago: executing program 56 (id=6859): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0x8f5, 0x0) close(r1) write(r2, 0x0, 0x0) 1m26.365143879s ago: executing program 6 (id=7290): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m23.297390761s ago: executing program 6 (id=7296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xffffffdb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x2f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x0, 0x20, [0x7f0000ff, 0xff, 0xff000000, 0xffffffff]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m23.219228703s ago: executing program 6 (id=7300): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') writev(r2, 0x0, 0x0) sync_file_range(r2, 0x5, 0x3, 0x3) 1m23.004309839s ago: executing program 6 (id=7302): socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m22.723524776s ago: executing program 6 (id=7304): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) 1m22.441322533s ago: executing program 6 (id=7306): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002b00)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=""/165, 0xa5}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/5, 0x5}, 0x8}], 0x2, 0x45833af92e4b39ff, 0x0) 1m22.350286168s ago: executing program 57 (id=7306): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002b00)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=""/165, 0xa5}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/5, 0x5}, 0x8}], 0x2, 0x45833af92e4b39ff, 0x0) 56.454023753s ago: executing program 7 (id=7727): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001300)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@errors_remount}, {@commit}, {@usrquota}, {@bh}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x111) 56.109100491s ago: executing program 7 (id=7732): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 56.002031858s ago: executing program 7 (id=7734): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) dup3(r1, r0, 0x0) io_setup(0x3, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x800, 0x6, 0xfffff441, 0x6, 0x10, "d6623c090bfd69ff8b055222c569c503970825"}) 55.712960547s ago: executing program 7 (id=7742): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x200001, 0x0) 55.706083378s ago: executing program 7 (id=7744): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, 0x0}, 0x296) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 55.486190165s ago: executing program 7 (id=7749): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x15}, 0x880, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) r1 = epoll_create(0x8) ppoll(&(0x7f00000000c0)=[{r1, 0x2140}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x11, 0x2e, 0x0}) 55.464712048s ago: executing program 58 (id=7749): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x15}, 0x880, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) r1 = epoll_create(0x8) ppoll(&(0x7f00000000c0)=[{r1, 0x2140}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x11, 0x2e, 0x0}) 40.622842461s ago: executing program 5 (id=7951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 40.548871894s ago: executing program 5 (id=7953): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="1400000072004f030e78cfe9cb6c2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x3, {}, {}, @result={0x1f00}}], 0x1c) 40.308591653s ago: executing program 5 (id=7956): sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x11) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x100, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x3, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x4008080) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x9) 39.452506816s ago: executing program 5 (id=7968): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x200001, 0x0) 39.328660447s ago: executing program 5 (id=7979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 39.117198572s ago: executing program 5 (id=7971): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x40}, 0x6008045) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 39.117065592s ago: executing program 59 (id=7971): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x40}, 0x6008045) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.953915327s ago: executing program 3 (id=8439): bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8c014) 2.709514069s ago: executing program 8 (id=8446): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x74099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xb) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.617120684s ago: executing program 3 (id=8447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2.470366749s ago: executing program 2 (id=8448): syz_clone(0x22029400, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2.46323406s ago: executing program 3 (id=8449): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x40, 0x32, 0x43a1bd75, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) 1.86480853s ago: executing program 3 (id=8451): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 1.838895534s ago: executing program 8 (id=8452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x6, 0x8, 0x9, 0x200, 0x6, 0x4, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 1.745877199s ago: executing program 8 (id=8453): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@nobh}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@sysvgroups}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 1.56361299s ago: executing program 2 (id=8456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDGKBSENT(r1, 0x4b48, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) close_range(r0, 0xffffffffffffffff, 0x0) 1.502713709s ago: executing program 2 (id=8457): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x41, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x844, 0x0, 0x43a13d76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000005c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000880)="40f05373f047010000bf7bbb7c00", 0x0, 0xbaa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.229204946s ago: executing program 9 (id=8459): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3ff, 0x5, 0x6, 0x18, 0x458}, 0x2, 0x2}, [{0x1, 0x87992fa, 0x8, 0x8, 0x8, 0x7ff}, {0x3b0000, 0x2, 0x5, 0x7, 0x3b4e, 0xfffffff2}, {0x9, 0x3, 0xd289, 0x3, 0x5, 0xfffff06d}, {0x4, 0x8f80, 0x7df1, 0x5, 0xbb, 0x6}, {0x40, 0x1, 0x8, 0x4, 0x8000000, 0x7fffffff}, {0x5, 0x2, 0x80000000, 0x4, 0x4, 0x8}, {0x7690ea5, 0x401, 0x1, 0x4, 0x7, 0x1ff}, {0x2, 0xd, 0xd41, 0x8, 0x80000000, 0x5}, {0x6, 0x0, 0x3ff, 0x4, 0x8, 0x4}, {0x2, 0xfffeffff, 0xbb, 0x1ff, 0x0, 0xb5}, {0x101, 0x1, 0x44, 0x1, 0xe8, 0x101}, {0x9, 0x8, 0x1, 0x1, 0x2, 0x7}, {0x6, 0xd, 0x9, 0xa0, 0xffffffff, 0x2}, {0x7fff, 0x7, 0x3, 0x80000000, 0x9, 0x10001}, {0x1004, 0x7ff, 0x7000000, 0x0, 0x2, 0x2}, {0x8, 0x3, 0x3ff, 0x5, 0x1, 0x5}, {0x8, 0x0, 0x4, 0x8, 0x1}, {0x4, 0x0, 0x3, 0xeaa, 0x40, 0xffff}, {0x1, 0x0, 0x4, 0x7, 0x2, 0x7}, {0xd319, 0xa, 0x80000001, 0x3, 0x9, 0x5}, {0x8, 0x2, 0xff, 0x9, 0x0, 0x81}, {0x9, 0x1, 0xa8, 0x9, 0x0, 0xfffff000}, {0x80, 0x6, 0x3ff, 0x2, 0x51e, 0x48e6}, {0x1, 0xf, 0x8000, 0x80000, 0x0, 0x7}, {0x6, 0x3, 0x101, 0x3, 0x3, 0xfffffff8}, {0x2, 0xab7c, 0x3, 0x2, 0x5}, {0x8, 0x2, 0x89, 0x0, 0x3, 0x6}, {0x3, 0x7, 0x1, 0xb435, 0x6, 0xfffffffc}, {0x8, 0x0, 0x0, 0x0, 0x100, 0x401}, {0xfffffffb, 0x5, 0x7, 0x4, 0x8, 0x7}, {0x5, 0x0, 0x2, 0x1, 0x0, 0x7}, {0x6, 0x0, 0x2, 0x7f, 0xc, 0x8}, {0x5, 0x3ff, 0xffffffff, 0x5, 0x10000, 0x6}, {0x9, 0x1, 0x7, 0xc, 0x3674, 0x5}, {0x2e52, 0x10001, 0x1000, 0xffff, 0x2, 0xa9e}, {0x6, 0x80000001, 0x7, 0x2, 0xfff, 0x7fff}, {0xf, 0x0, 0x8, 0x4, 0x79e, 0x2}, {0x8, 0x5, 0x3, 0x5, 0x8, 0x200}, {0x12, 0xfcc, 0x9, 0x6, 0x7, 0x5}, {0x3ff, 0x1, 0xa, 0xffffa747, 0xfffff002, 0xb0}, {0x2614, 0x5, 0x3ff, 0xe5, 0x200, 0x8}, {0x7e10, 0x4, 0xa, 0x0, 0x9, 0x401}, {0xfffffff7, 0x1000, 0x7fff, 0x8, 0x7, 0x7}, {0x81, 0x5, 0x3, 0x7, 0x82b3, 0x3}, {0xc, 0x401, 0x6, 0x3, 0x80000000, 0xb6e}, {0x9, 0x800, 0xfffffff9, 0x2, 0x3, 0x4}, {0xe, 0x0, 0x3, 0x5, 0x3b83, 0x3}, {0x200, 0xfffffffa, 0x8, 0x721, 0xd359, 0x10}, {0x7, 0x5, 0x10001, 0x8, 0x80000000, 0x2}, {0x9, 0x6, 0xfba, 0x6, 0x9bd, 0xdae}, {0x7, 0x507, 0x8, 0x10001, 0x5, 0x7}, {0x448f, 0x81, 0x8, 0x80, 0x9, 0x4}, {0x7, 0x4993, 0xe76, 0x6, 0xcb0, 0x401}, {0x9, 0xc49c, 0xd4e1, 0x5, 0x1, 0x5}, {0x1, 0x7, 0xc, 0x2, 0xade, 0xb}, {0x1e14, 0xe, 0x9, 0x95a, 0x1, 0x7}, {0x6, 0x101, 0xffff, 0x10001, 0x0, 0x7ff}, {0x4, 0x4, 0x0, 0x401, 0x5, 0x5}, {0x1, 0x4d8, 0x57a0, 0x1, 0x9, 0xffffffff}, {0xffffffff, 0x6, 0x0, 0x2222068c, 0x3, 0x1}, {0x2, 0x1000, 0x2, 0x2, 0xfffffff7, 0x7ff}, {0xd, 0x3af, 0x9, 0x8, 0x5, 0xe}, {0xfffffffc, 0x33a1, 0x8, 0x8, 0x2, 0xf59}, {0x10000, 0x7fffffff, 0x6, 0x6, 0x6, 0x6}, {0xe, 0xb1, 0x7, 0x1, 0x5, 0x2}, {0x191, 0x6, 0x1, 0x8, 0x4272, 0xfffffff8}, {0x9, 0x6, 0x7, 0x0, 0xf960, 0x9d}, {0x1, 0x2, 0x6, 0x6cde, 0xfffffff7, 0x1ff}, {0x5, 0x3, 0x3, 0x1030, 0x494, 0xffffffcc}, {0x1e2, 0x1, 0x1, 0x4, 0x5, 0x6}, {0xa503, 0x80000000, 0xc3, 0x1ff, 0x1, 0x7}, {0x7, 0x1, 0xe, 0xff, 0x3, 0x9}, {0x80000001, 0x0, 0x3, 0xd, 0x7fffffff, 0xef}, {0x7, 0x6, 0x0, 0x764, 0x5, 0x4}, {0x0, 0x2, 0xb69, 0x7fff, 0x9, 0x5}, {0x5, 0xff, 0x6, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x5, 0x5, 0x3, 0x10001}, {0x6, 0x2, 0x0, 0x2, 0x2ee6, 0x8}, {0xb54, 0x5, 0x6, 0xfffffffa, 0x323, 0x2}, {0x3, 0x9, 0xfffffff7, 0x8, 0x7b6b14a2, 0x3}, {0x8, 0x80000000, 0x1, 0x44, 0x100, 0x257f}, {0x5, 0x5, 0xab, 0x9, 0x5, 0x7fffffff}, {0x9e, 0x6, 0x6, 0x3, 0x2, 0xf2}, {0x9, 0x4000, 0x101, 0x6, 0x4, 0xd}, {0x401, 0x0, 0x7, 0xffffffff, 0x8, 0x9}, {0xfffffffa, 0x9, 0xfffffffb, 0x5, 0x1004000, 0x7fff}, {0x0, 0x6, 0x80000000, 0x101, 0x5}, {0x10001, 0x2, 0x8, 0xffffffc0, 0xa, 0x5}, {0x7, 0x7, 0x8, 0xca, 0x5, 0x8}, {0xd576, 0x4, 0x4, 0x7, 0x4, 0x8}, {0xe, 0x6f, 0x10000, 0x2, 0xdc7f, 0xb66}, {0xb64, 0x4, 0x7, 0x0, 0x80000001, 0x9}, {0x1, 0x51b2, 0x7, 0x3, 0x4}, {0x3, 0x4, 0x6146a1c3, 0x3, 0xd7, 0x5}, {0x80000001, 0x40, 0xfff, 0x81, 0x4, 0xfffffff9}, {0x7, 0x800, 0x5c, 0x45, 0x4, 0x100}, {0x6, 0x1ff, 0x3, 0x9fed, 0x0, 0x4}, {0x4b, 0x4, 0x67, 0x7fffffff, 0xf7}, {0x35be, 0xc, 0x1, 0x800, 0xfffeffff, 0x1000000}, {0x7, 0x8001, 0x0, 0x1, 0x7}, {0x800, 0x5, 0x0, 0x10000000, 0x6, 0x3}, {0x9, 0x6, 0xd, 0x5, 0x537, 0x2}, {0x7, 0x80, 0xb51, 0x1, 0x8000, 0x6}, {0x1, 0x36, 0x186b, 0x995f, 0x5, 0x4}, {0xd3a, 0x15aa, 0x92c0, 0x10000, 0x4, 0x6}, {0x80000000, 0x7, 0x6, 0x0, 0x9, 0xe}, {0x3, 0x3694, 0x6, 0x9, 0x51cf3566, 0x4}, {0x0, 0xffffffff, 0x3, 0x7f, 0x4, 0x1ff}, {0x6, 0x6, 0x2, 0x5, 0xdf63, 0x4}, {0x6, 0x8001, 0x8, 0x7, 0x10000, 0xb}, {0x3, 0x4, 0x4, 0x6, 0x1ff, 0x1}, {0x10, 0x2, 0x54, 0x47c, 0x808, 0x4}, {0x7, 0x101, 0xe, 0x5, 0x100, 0xfffffffe}, {0x0, 0x6, 0x4, 0x1, 0xfffffff1, 0x36}, {0x0, 0x81, 0x6, 0x5b1b, 0xfff, 0xd29}, {0x1ff, 0x2, 0x7fffffff, 0x0, 0x0, 0x4}, {0x800, 0x53e, 0xac15, 0x73, 0xf112, 0x9}, {0x2, 0x800, 0x8d, 0x6268, 0x8, 0x4}, {0x8, 0xffff, 0xf2d, 0x2, 0x5, 0xa}, {0x8, 0x2, 0x1, 0x31d8, 0x7, 0x5}, {0x5, 0x8, 0xda2c, 0x823d, 0x2, 0xfffffff9}, {0x2, 0xc, 0x7fffffff, 0x0, 0x165, 0x6}, {0x5, 0x3, 0x8622, 0x80, 0x1, 0x1}, {0x3, 0x81, 0xc13, 0xffff, 0x1, 0x4}, {0xf4f0, 0x800, 0xa, 0x5, 0x7, 0x11b}, {0x7, 0x86b7, 0x0, 0xee, 0x81, 0x6}, {0x3, 0xfffffff7, 0xffff, 0x101, 0x3}, {0x5, 0x40, 0x7, 0xfffffffd, 0x9, 0x3}], [{0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {0x4}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x6bc7e79ad7b0d1cc}, {0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x2}, {0x3}, {0x3, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x5}, {0x3}, {0x4}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x4}, {0x4}, {0x5}, {0x5}, {0x5, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x371e711c6fc2f61}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0xf9ad1b51769e9d3d}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 892.759661ms ago: executing program 3 (id=8460): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000005000000420000003e"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x2, 0x4}}, 0xe) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 793.148048ms ago: executing program 8 (id=8461): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007240), 0x0, 0x1c000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x41, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 780.42657ms ago: executing program 2 (id=8462): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 770.305832ms ago: executing program 3 (id=8463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 745.854306ms ago: executing program 9 (id=8464): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 719.85823ms ago: executing program 9 (id=8465): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$bt_hci(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000003880), 0x80000, 0x0) 703.609943ms ago: executing program 2 (id=8466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x9}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 575.287664ms ago: executing program 9 (id=8468): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000001c0)=""/20) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 526.008392ms ago: executing program 2 (id=8469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 489.887639ms ago: executing program 9 (id=8470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) fchdir(0xffffffffffffffff) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000180a05000000000000000000020000001c0003803800038014000100776732000000000000000000000000000900020073797a30000000000900010073797a30"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 459.281214ms ago: executing program 1 (id=8471): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 455.114274ms ago: executing program 8 (id=8472): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r6 = dup2(r4, r5) close_range(r6, 0xffffffffffffffff, 0x0) 413.435541ms ago: executing program 1 (id=8473): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/60, 0x3c) unlinkat(r1, &(0x7f0000000100)='./bus\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getdents(r2, 0xfffffffffffffffd, 0x58) 392.328065ms ago: executing program 1 (id=8474): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket(0x1d, 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 372.466148ms ago: executing program 9 (id=8475): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mknod(0x0, 0x1000, 0x6) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000280)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') munlock(&(0x7f0000275000/0x1000)=nil, 0x1000) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 371.640388ms ago: executing program 1 (id=8476): mount(0x0, 0x0, 0x0, 0x2200020, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = dup(0xffffffffffffffff) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000000c0)={0x1, "1ea87d84daed8c7c3e63528dcc7e559b09e7f21a99f88060a9d1d599a14ffc4cde3f74560846dd722e0284ad12dbc1251cbf8598ac4ec1fdd33cfc75e1e3257af49f395c0c5cf3dd477dcd11b636425b73e949585040107a4d53fce78ca109151fe13f720e2bbb322bdb54ab8d20464ea9106747dbffb55d5eb8d883634b773935d5f4319d3d0bb66166880c1329786e00e8bcd1d7153aa90a5c3ad8bedb0a91b01060a9faccb5670387da472e2094a970fbc13c0c269c28408f1593a5b9fdd1466e2b7d34817ad57c0e54d5e4e53b537a547cd0078db54a53b6dbfa48bb354f927ebb08507e9298709f51b5588aa7413987561a76dd7d57fe46bfdf1e2dd0ce"}) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) 329.487585ms ago: executing program 8 (id=8477): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$eJzs3c9PHFUcAPDvDGwplLo08VD1QtREEiMU2qpNNJF48dCe7KFHCdBKCq0BTGxD/BGNN000/gH1oP4JHvXg/6Bn60GbEMNB6sFkzezOwLo/aJfuupR+Pslk35s3O+/NvL7Zmdc3jwAeWeMR8VpEDETEqYgo5+vTfIkPa0u23fbWxvzfWxvzSVQqb/6ZRJKvK/aV5J/H8h1MpBHpJ0k81SLftRs3r84tLy+u5vGp9ZV3ptZu3HxhaWXuyuKVxWszL54+c/bsy+dmXurasW6uJJ89++353774dOHLn//4YSwr72ieVn8c3TIe4zvnpNG5bmfWZ0frwslgHwsCAMCe0vzef7B6/1+Ogdi9eSvH5z/1tXAAAABAV1QqxScAAABweCWe/QEAAOCQK8YBbG9tzBdLH4cj8D/bnI2IsVr9382XWsrgzju9pYb3e7tpPCLeOHphJluiR+9hAwAAADzKfpytTfzX3P/3T+Vk3XbDETFSzO3XReMN8eb+n/ROl7OkzuZsxCsRcbep/y8tNhkbyGPHq12FpeTy0vLiqYh4LCImojSUxaf3yOP9p69+1y6tvv/v1u1L01n+2efuFumdwaH/fmdhbn3uQY6ZXZsfRTw52Kr+k50+3/p5MjNLHebx1tL2q+3SsvrP6vvW7Uul1vVPL1W+TuK5lu1/d+bSZO/5Waeq14Op/Kow1JzHr6PffNwu//r2ny1Z/sX/BdB7Wfsf2bv+q/Pk7szXu9Z5Ht//deGXdmn3rv/W1/8jycVqAY/k696bW19fnY44kpxvXj9T6rzQD5t2Ew03qJ2P3fOV1f/EM61//0/W7fp4/ntf3kfRXv/gxMV2adp/f2X1v9BR++888PbIExPt8r+/9n+mWphiJ+7/7u1+K6jf5QQAAAAAAACgO9KIGC0n6WQRjjSdnKyN8308RtLl62vrz1++/u61hdoYwLEopcX4z3LdeNDp2mvkO/GZhvjpiDgREV+Vh6vxyfnh6rgDAAAAoPeOVZ/5m5//M7/v52UPAAAA4GAa63cBAAAAgJ7z/A8AAACH2oPM67+8uFr8iaB9fl3goQskcSCKMZD/wzsop+XwBfp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg/g0AAP//Ogi85g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 209.136765ms ago: executing program 1 (id=8478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdfff, {0x0, 0x0, 0x0, r6, {0x6, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xd, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 0s ago: executing program 1 (id=8479): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x80ffd, 0x6, 0x1000, 0x3a, 0x37b, 0x2, 0x2000006}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) syz_clone(0xa0020011, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): [ 413.103190][T28172] EXT4-fs: Ignoring removed bh option [ 413.123137][T28172] EXT4-fs: inline encryption not supported [ 413.146144][T28172] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 413.179471][T28172] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 413.204053][T28172] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7243: bg 0: block 248: padding at end of block bitmap is not set [ 413.218548][T28172] loop9: lost filesystem error report for type 5 error -117 [ 413.218951][T28172] Quota error (device loop9): write_blk: dquota write failed [ 413.226303][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 413.226332][ C1] EXT4-fs (loop9): last error at time 1776526859: ext4_validate_block_bitmap:441 [ 413.250733][T28172] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 413.256309][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 413.262444][T28172] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.7243: Failed to acquire dquot type 1 [ 413.267801][T25449] Bluetooth: hci0: command 0x1003 tx timeout [ 413.278383][T28172] loop9: lost filesystem error report for type 5 error -28 [ 413.279599][T28172] EXT4-fs (loop9): 1 truncate cleaned up [ 413.351383][T28172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 413.452041][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 413.465934][ T4248] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 413.486372][ T4248] EXT4-fs error (device loop9): ext4_release_dquot:7062: comm kworker/u8:18: Failed to release dquot type 1 [ 413.530025][ T4248] loop9: lost filesystem error report for type 5 error -117 [ 413.530762][T24932] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.609162][T28193] loop9: detected capacity change from 0 to 1024 [ 413.674358][T28193] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.860825][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.914560][T28217] loop9: detected capacity change from 0 to 256 [ 413.980724][T28217] loop9: detected capacity change from 0 to 4096 [ 414.011533][T28217] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.078177][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.491676][ T28] audit: type=1326 audit(1776526860.880:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.6.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 414.517751][ T28] audit: type=1326 audit(1776526860.880:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.6.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 414.543437][ T28] audit: type=1326 audit(1776526860.910:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.6.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 414.569188][ T28] audit: type=1326 audit(1776526860.910:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.6.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 414.595591][ T28] audit: type=1326 audit(1776526860.910:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.6.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 414.620840][ T28] audit: type=1326 audit(1776526860.910:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28244 comm="syz.6.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 414.788601][T28253] loop2: detected capacity change from 0 to 1024 [ 414.807547][T28253] EXT4-fs: Ignoring removed bh option [ 414.848691][T28253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.271982][T24932] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.419878][T28283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7284'. [ 415.458119][T28286] loop5: detected capacity change from 0 to 256 [ 415.470740][T28283] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.534388][T28286] FAT-fs (loop5): Directory bread(block 64) failed [ 415.556514][T28226] kexec: Could not allocate control_code_buffer [ 415.565571][T28286] FAT-fs (loop5): Directory bread(block 65) failed [ 415.572149][T28286] FAT-fs (loop5): Directory bread(block 66) failed [ 415.604808][T28286] FAT-fs (loop5): Directory bread(block 67) failed [ 415.627676][T28286] FAT-fs (loop5): Directory bread(block 68) failed [ 415.637595][T28286] FAT-fs (loop5): Directory bread(block 69) failed [ 415.644352][T28286] FAT-fs (loop5): Directory bread(block 70) failed [ 415.651259][T28286] FAT-fs (loop5): Directory bread(block 71) failed [ 415.658690][T28286] FAT-fs (loop5): Directory bread(block 72) failed [ 415.665667][T28286] FAT-fs (loop5): Directory bread(block 73) failed [ 418.644317][T28309] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7296'. [ 418.686088][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7296'. [ 418.722507][ T28] kauditd_printk_skb: 234 callbacks suppressed [ 418.722526][ T28] audit: type=1326 audit(1776526865.110:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 418.753386][ T28] audit: type=1326 audit(1776526865.110:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 418.783213][ T28] audit: type=1326 audit(1776526865.110:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 418.809086][ T28] audit: type=1326 audit(1776526865.110:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 418.846011][ T28] audit: type=1326 audit(1776526865.110:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 418.869909][ T28] audit: type=1326 audit(1776526865.110:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 418.893981][ T28] audit: type=1326 audit(1776526865.170:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ce7c819 code=0x7ffc0000 [ 418.960724][ T28] audit: type=1326 audit(1776526865.170:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c6ce7c582 code=0x7ffc0000 [ 418.984966][ T28] audit: type=1326 audit(1776526865.170:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1c6ce7c617 code=0x7ffc0000 [ 419.009407][ T28] audit: type=1326 audit(1776526865.170:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28319 comm="syz.6.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1c6ce39511 code=0x7ffc0000 [ 419.098236][T28327] loop6: detected capacity change from 0 to 4096 [ 419.137681][T28327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.217104][T28334] hsr0: entered promiscuous mode [ 419.230764][T26730] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 419.249418][T28334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7303'. [ 419.262586][T26730] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 419.275764][T28334] hsr_slave_0: left promiscuous mode [ 419.301121][T28334] hsr_slave_1: left promiscuous mode [ 419.420702][T26730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.554625][T28341] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7308'. [ 419.688208][T28346] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7311'. [ 419.789361][ T12] bridge_slave_1: left allmulticast mode [ 419.795045][T28351] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 419.865049][ T12] bridge_slave_1: left promiscuous mode [ 419.870834][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.934553][ T12] bridge_slave_0: left allmulticast mode [ 419.939378][T28365] netlink: 'syz.5.7314': attribute type 13 has an invalid length. [ 419.953699][ T12] bridge_slave_0: left promiscuous mode [ 419.975690][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.168637][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.187901][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.219062][ T12] bond0 (unregistering): Released all slaves [ 420.704176][ T12] hsr_slave_0: left promiscuous mode [ 420.722251][ T12] hsr_slave_1: left promiscuous mode [ 420.740001][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.762942][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.858614][ T12] team0 (unregistering): Port device team_slave_1 removed [ 420.880455][ T12] team0 (unregistering): Port device team_slave_0 removed [ 420.992378][T28352] lo speed is unknown, defaulting to 1000 [ 421.374214][T28352] chnl_net:caif_netlink_parms(): no params data found [ 421.464669][T28352] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.479881][T28352] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.494958][T28352] bridge_slave_0: entered allmulticast mode [ 421.508556][T28352] bridge_slave_0: entered promiscuous mode [ 421.523662][T28352] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.538712][T28352] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.578628][T28352] bridge_slave_1: entered allmulticast mode [ 421.607724][T28352] bridge_slave_1: entered promiscuous mode [ 421.697263][T28352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.753731][T28352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.837468][T28523] syzkaller0: entered promiscuous mode [ 421.854736][T28523] syzkaller0: entered allmulticast mode [ 421.898608][T28352] team0: Port device team_slave_0 added [ 421.982908][T28352] team0: Port device team_slave_1 added [ 422.029923][T28352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.054747][T28352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.124877][T28352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.147231][T28352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.154222][T28352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.187962][T28352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.219470][T28352] hsr_slave_0: entered promiscuous mode [ 422.225839][T28352] hsr_slave_1: entered promiscuous mode [ 422.255523][T28352] debugfs: 'hsr0' already exists in 'hsr' [ 422.271467][T28352] Cannot create hsr debugfs directory [ 422.593666][T28570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7335'. [ 422.623139][T28570] bond0: entered promiscuous mode [ 422.642308][T28570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.661901][T28577] bridge3: entered promiscuous mode [ 422.667994][T28577] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 422.743427][T28570] bond0: left promiscuous mode [ 422.754745][T28570] bridge3: left promiscuous mode [ 422.765046][T28570] bond0: entered allmulticast mode [ 422.774867][T28570] bridge3: entered allmulticast mode [ 422.845691][T28352] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 422.857859][T28352] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 422.883261][T28352] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 422.909252][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 422.920827][T28352] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.005751][T28352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.021734][T28352] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.032255][T28604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7343'. [ 423.037355][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.048607][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.064378][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.071678][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.150071][T28352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.288834][T28352] veth0_vlan: entered promiscuous mode [ 423.299974][T28352] veth1_vlan: entered promiscuous mode [ 423.318658][T28352] veth0_macvtap: entered promiscuous mode [ 423.327066][T28352] veth1_macvtap: entered promiscuous mode [ 423.339652][T28352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.352816][T28352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.365159][ T4248] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.382226][ T4248] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.403576][ T4248] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.418275][ T4248] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.637448][T28628] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 423.843441][T28634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7347'. [ 424.133851][T28649] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 424.140504][T28649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.149944][T28649] vhci_hcd vhci_hcd.0: Device attached [ 424.159328][T28649] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 424.165892][T28649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.191462][T28649] vhci_hcd vhci_hcd.0: Device attached [ 424.199228][T28649] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 424.205936][T28649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.215101][T28649] vhci_hcd vhci_hcd.0: Device attached [ 424.223905][T28649] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 424.230463][T28649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.238951][T28649] vhci_hcd vhci_hcd.0: Device attached [ 424.249023][T28649] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 424.255658][T28649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.275639][T28649] vhci_hcd vhci_hcd.0: Device attached [ 424.293892][T28649] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 424.300558][T28649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.325361][T28649] vhci_hcd vhci_hcd.0: Device attached [ 424.339185][T28649] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 424.345839][T28649] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 424.364014][T28649] vhci_hcd vhci_hcd.0: Device attached [ 424.384750][ T9] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 424.396884][T28649] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 424.403623][T28649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.411811][T28649] vhci_hcd vhci_hcd.0: Device attached [ 424.420295][T28670] vhci_hcd: connection closed [ 424.420307][T28668] vhci_hcd: connection closed [ 424.423379][T28674] vhci_hcd: connection closed [ 424.425653][T28653] vhci_hcd: connection closed [ 424.427719][T28662] vhci_hcd: connection closed [ 424.431059][T28651] vhci_hcd: connection reset by peer [ 424.436414][ T4216] vhci_hcd vhci_hcd.2: stop threads [ 424.440056][T28664] vhci_hcd: connection closed [ 424.449583][T28659] vhci_hcd: connection closed [ 424.460358][ T4216] vhci_hcd vhci_hcd.2: release socket [ 424.472417][ T4216] vhci_hcd vhci_hcd.2: disconnect device [ 424.478388][ T4216] vhci_hcd vhci_hcd.2: stop threads [ 424.483897][ T4216] vhci_hcd vhci_hcd.2: release socket [ 424.490102][ T4216] vhci_hcd vhci_hcd.2: disconnect device [ 424.496271][ T4216] vhci_hcd vhci_hcd.2: stop threads [ 424.501610][ T4216] vhci_hcd vhci_hcd.2: release socket [ 424.507437][ T4216] vhci_hcd vhci_hcd.2: disconnect device [ 424.513884][ T4216] vhci_hcd vhci_hcd.2: stop threads [ 424.538716][ T4216] vhci_hcd vhci_hcd.2: release socket [ 424.551764][ T4216] vhci_hcd vhci_hcd.2: disconnect device [ 424.561845][ T4216] vhci_hcd vhci_hcd.2: stop threads [ 424.575607][ T4216] vhci_hcd vhci_hcd.2: release socket [ 424.587754][ T4216] vhci_hcd vhci_hcd.2: disconnect device [ 424.599248][ T4216] vhci_hcd vhci_hcd.2: stop threads [ 424.615683][ T4216] vhci_hcd vhci_hcd.2: release socket [ 424.621786][ T4216] vhci_hcd vhci_hcd.2: disconnect device [ 424.627745][ T4216] vhci_hcd vhci_hcd.2: stop threads [ 424.633105][ T4216] vhci_hcd vhci_hcd.2: release socket [ 424.639295][ T4216] vhci_hcd vhci_hcd.2: disconnect device [ 424.646246][ T4216] vhci_hcd vhci_hcd.2: stop threads [ 424.656995][ T4216] vhci_hcd vhci_hcd.2: release socket [ 424.672006][ T4216] vhci_hcd vhci_hcd.2: disconnect device [ 424.844142][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 424.844162][ T28] audit: type=1400 audit(1776526871.230:4174): avc: denied { mounton } for pid=28685 comm="syz.1.7360" path="/file0" dev="ramfs" ino=87262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 424.926253][ T3609] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 424.932416][T25449] Bluetooth: hci0: command 0x1003 tx timeout [ 425.034520][ T28] audit: type=1326 audit(1776526871.420:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.058523][ T28] audit: type=1326 audit(1776526871.420:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.082478][ T28] audit: type=1326 audit(1776526871.430:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.115913][ T28] audit: type=1326 audit(1776526871.430:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.141045][ T28] audit: type=1326 audit(1776526871.430:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.167350][ T28] audit: type=1326 audit(1776526871.430:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.191566][ T28] audit: type=1326 audit(1776526871.430:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.250805][ T28] audit: type=1326 audit(1776526871.430:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.275685][ T28] audit: type=1326 audit(1776526871.430:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28700 comm="syz.2.7366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 425.766388][T28719] syz_tun: left allmulticast mode [ 425.771620][T28719] syz_tun: left promiscuous mode [ 425.777180][T28719] bridge0: port 1(syz_tun) entered disabled state [ 425.784148][T28719] vlan2: left promiscuous mode [ 425.789442][T28719] geneve0: left promiscuous mode [ 425.800189][T28719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 425.970097][T28726] netlink: 'syz.5.7375': attribute type 4 has an invalid length. [ 425.994331][T28726] netlink: 'syz.5.7375': attribute type 4 has an invalid length. [ 427.029218][T28800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7388'. [ 427.046721][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 427.092865][T28806] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28806 comm=syz.2.7390 [ 427.207311][T28830] netem: incorrect gi model size [ 427.220049][T28830] netem: change failed [ 427.228229][T28832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7392'. [ 427.273586][T28835] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7393'. [ 427.338849][T28842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7397'. [ 427.347801][T28841] ip6gre1: entered promiscuous mode [ 427.353225][T28841] ip6gre1: entered allmulticast mode [ 427.366347][T28842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7397'. [ 427.542653][T28856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7403'. [ 427.663035][T28868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7409'. [ 427.916697][T28874] team0: Port device gtp4 added [ 428.158220][T28890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7418'. [ 428.168343][T28890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7418'. [ 428.222056][T28908] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.298507][T28908] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.370237][T28928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=28928 comm=syz.2.7429 [ 428.383960][T28908] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.396250][T28928] netlink: 1195 bytes leftover after parsing attributes in process `syz.2.7429'. [ 428.462381][T28908] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.579877][ T63] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 428.610563][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 428.640824][ T242] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 428.671342][ T242] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 428.734456][T28958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.781257][T28963] erspan0: entered promiscuous mode [ 428.795499][T28965] netlink: 'syz.1.7436': attribute type 1 has an invalid length. [ 428.804283][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7434'. [ 428.850625][T28965] bond10: entered promiscuous mode [ 428.864738][T28965] bond10: entered allmulticast mode [ 428.871825][T28965] 8021q: adding VLAN 0 to HW filter on device bond10 [ 428.901686][T28972] erspan1: entered allmulticast mode [ 428.927520][T28972] bond10: (slave erspan1): making interface the new active one [ 428.939701][T28972] erspan1: entered promiscuous mode [ 428.946334][T28972] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 429.084871][T25449] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 429.087286][ T3609] Bluetooth: hci0: command 0x1003 tx timeout [ 429.248784][T28968] loop5: detected capacity change from 0 to 32768 [ 429.543028][T29008] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7450'. [ 429.564745][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 429.590618][T29011] netlink: 'syz.7.7451': attribute type 1 has an invalid length. [ 429.608046][T29011] netlink: 'syz.7.7451': attribute type 4 has an invalid length. [ 429.625402][T29011] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.7451'. [ 429.674965][T29013] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7452'. [ 429.746437][T29017] netlink: 'syz.7.7454': attribute type 1 has an invalid length. [ 430.046617][T29039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7462'. [ 430.097816][T29039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7462'. [ 430.246401][T29047] lo speed is unknown, defaulting to 1000 [ 430.293503][T29052] loop5: detected capacity change from 0 to 512 [ 430.649068][ T3410] kernel write not supported for file bpf-prog (pid: 3410 comm: kworker/0:4) [ 430.693318][T29059] loop5: detected capacity change from 0 to 1024 [ 430.719167][T29059] EXT4-fs: Ignoring removed bh option [ 430.758275][T29059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.990873][T29072] loop9: detected capacity change from 0 to 512 [ 431.014452][T29072] EXT4-fs: Ignoring removed nobh option [ 431.068963][T29072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.121811][T29072] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.179838][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 431.179897][ T28] audit: type=1400 audit(1776526877.560:4191): avc: denied { getopt } for pid=29071 comm="syz.9.7474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 431.247943][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.600447][T24987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.925982][T29104] lo speed is unknown, defaulting to 1000 [ 432.264646][T29120] netlink: 'syz.2.7488': attribute type 4 has an invalid length. [ 432.307753][T29120] netlink: 'syz.2.7488': attribute type 4 has an invalid length. [ 432.537187][T29127] bond11: entered allmulticast mode [ 432.588025][T29127] macvlan2: entered promiscuous mode [ 432.652228][T29127] macvlan2: entered allmulticast mode [ 432.678054][T29127] bond11: (slave macvlan2): Opening slave failed [ 432.872233][T29143] netlink: 'syz.5.7497': attribute type 1 has an invalid length. [ 432.930790][T29143] bond2: entered promiscuous mode [ 432.940324][T29150] __nla_validate_parse: 5 callbacks suppressed [ 432.940345][T29150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7497'. [ 432.949833][T29143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.010770][T29143] bond2: (slave bridge3): making interface the new active one [ 433.062841][T29150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7497'. [ 433.082213][T29143] bridge3: entered promiscuous mode [ 433.091453][T29143] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 433.205884][T29169] netlink: 'syz.2.7506': attribute type 13 has an invalid length. [ 433.316748][T29180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7510'. [ 433.346881][T29180] ip6gre1: entered promiscuous mode [ 433.358304][T29180] ip6gre1: entered allmulticast mode [ 433.445544][T29186] erspan0: left promiscuous mode [ 433.490491][T29186] vxlan0: left promiscuous mode [ 433.531835][ T28] audit: type=1326 audit(1776526879.920:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 433.544868][ T242] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.613506][ T242] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.635680][T29198] netlink: 'syz.1.7516': attribute type 1 has an invalid length. [ 433.643504][ T242] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.652559][ T28] audit: type=1326 audit(1776526879.920:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 433.686349][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7516'. [ 433.716532][T29198] bond12: entered promiscuous mode [ 433.722366][ T28] audit: type=1326 audit(1776526879.920:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 433.732564][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7516'. [ 433.758936][T29198] 8021q: adding VLAN 0 to HW filter on device bond12 [ 433.774421][ T28] audit: type=1326 audit(1776526879.920:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 433.798155][ T242] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.850424][ T28] audit: type=1326 audit(1776526879.960:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 433.880189][T29206] bond12: (slave bridge4): making interface the new active one [ 433.905646][T29206] bridge4: entered promiscuous mode [ 433.923289][ T28] audit: type=1326 audit(1776526879.960:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 433.947778][ T28] audit: type=1326 audit(1776526879.960:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 433.967829][T29206] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 433.994592][ T28] audit: type=1326 audit(1776526879.970:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 434.075375][ T28] audit: type=1326 audit(1776526879.970:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29194 comm="syz.9.7515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 434.631131][T29262] lo: Caught tx_queue_len zero misconfig [ 434.649083][T29262] netlink: 'syz.2.7530': attribute type 1 has an invalid length. [ 434.675425][T29262] netlink: 264 bytes leftover after parsing attributes in process `syz.2.7530'. [ 434.710738][T29262] netlink: 'syz.2.7530': attribute type 1 has an invalid length. [ 434.725838][T29262] netlink: 264 bytes leftover after parsing attributes in process `syz.2.7530'. [ 434.758807][T29262] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7530'. [ 435.234311][T29298] loop7: detected capacity change from 0 to 1024 [ 435.309983][T29298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.498126][T28352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.747318][T29336] bond0: entered promiscuous mode [ 435.772489][T29336] bond_slave_0: entered promiscuous mode [ 435.789681][T29336] bond_slave_1: entered promiscuous mode [ 435.806705][T29336] bridge1: entered promiscuous mode [ 436.469623][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 436.469640][ T28] audit: type=1400 audit(1776526882.860:4250): avc: denied { mounton } for pid=29370 comm="syz.2.7559" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.895742][T29399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7569'. [ 437.425946][T29434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.446229][T29434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.466192][T29434] loop7: detected capacity change from 0 to 128 [ 437.469669][T29437] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.7580'. [ 437.481733][T29434] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 437.524755][T29434] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 437.888837][T29441] lo speed is unknown, defaulting to 1000 [ 438.080859][T29447] loop9: detected capacity change from 0 to 256 [ 438.087980][T29447] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.101194][T29447] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 438.220177][ T28] audit: type=1400 audit(1776526884.610:4251): avc: denied { remount } for pid=29450 comm="syz.2.7589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 438.435867][T29470] lo speed is unknown, defaulting to 1000 [ 438.517445][T29474] __nla_validate_parse: 1 callbacks suppressed [ 438.517464][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7598'. [ 438.556008][T29474] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7598'. [ 438.754667][T29481] loop7: detected capacity change from 0 to 8192 [ 438.782116][T29481] syz.7.7601: attempt to access beyond end of device [ 438.782116][T29481] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 438.815289][T29481] Buffer I/O error on dev loop7, logical block 57847, async page read [ 438.834115][T29481] syz.7.7601: attempt to access beyond end of device [ 438.834115][T29481] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 438.853238][T29481] Buffer I/O error on dev loop7, logical block 57847, async page read [ 439.016773][T29489] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.024007][T29489] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.111467][T29489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.124096][T29489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.202583][ T562] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.223571][ T562] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.249443][ T562] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.260602][ T4258] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.309405][T29503] netlink: 'syz.7.7609': attribute type 2 has an invalid length. [ 439.574993][T29512] loop5: detected capacity change from 0 to 512 [ 439.584133][T29512] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7613: inode has both inline data and extents flags [ 439.597569][T29512] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 439.598168][T29512] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7613: couldn't read orphan inode 15 (err -117) [ 439.604775][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 439.610098][T29512] loop5: lost filesystem error report for type 5 error -117 [ 439.619264][ C1] EXT4-fs (loop5): initial error at time 1776526885: ext4_orphan_get:1397: inode 15 [ 439.628022][T29512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.633053][ C1] EXT4-fs (loop5): last error at time 1776526886: ext4_orphan_get:1402 [ 439.773008][T29516] EXT4-fs (loop5): shut down requested (2) [ 439.819893][T24987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.839990][T29518] loop5: detected capacity change from 0 to 512 [ 439.861315][T29518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.874222][T29518] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.003013][T24987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.234313][T29531] team0: Device gtp0 is of different type [ 440.451156][ T28] audit: type=1326 audit(1776526886.840:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29547 comm="syz.2.7624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41133cc819 code=0x0 [ 440.475952][T29549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7625'. [ 440.485256][T29551] netlink: 'syz.5.7623': attribute type 16 has an invalid length. [ 440.485263][T29549] netlink: 'syz.1.7625': attribute type 7 has an invalid length. [ 440.485280][T29549] netlink: 'syz.1.7625': attribute type 8 has an invalid length. [ 440.501181][T29551] netlink: 'syz.5.7623': attribute type 17 has an invalid length. [ 440.511613][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7625'. [ 440.550114][T29551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.892012][T29561] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7629'. [ 440.978153][T29563] loop9: detected capacity change from 0 to 512 [ 440.995896][T29563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 441.024291][T29563] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.7630: iget: bad i_size value: 38620345925642 [ 441.063448][T29563] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.063631][T29563] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.7630: couldn't read orphan inode 15 (err -117) [ 441.072853][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 441.072897][ C0] EXT4-fs (loop9): initial error at time 1776526887: ext4_orphan_get:1397: inode 15 [ 441.072930][ C0] EXT4-fs (loop9): last error at time 1776526887: ext4_orphan_get:1397: inode 15 [ 441.156781][T29563] loop9: lost filesystem error report for type 5 error -117 [ 441.157593][T29563] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.234446][T29570] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.7631'. [ 441.253914][T29570] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7631'. [ 441.267234][T29563] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.7630: bg 0: block 5: invalid block bitmap [ 441.299596][T29563] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 996 with error 28 [ 441.330835][T29563] EXT4-fs (loop9): This should not happen!! Data will be lost [ 441.330835][T29563] [ 441.353827][T29563] EXT4-fs (loop9): Total free blocks count 0 [ 441.369355][T29563] EXT4-fs (loop9): Free/Dirty block details [ 441.376927][T29563] EXT4-fs (loop9): free_blocks=0 [ 441.382062][T29563] EXT4-fs (loop9): dirty_blocks=996 [ 441.388226][T29563] EXT4-fs (loop9): Block reservation details [ 441.394393][T29563] EXT4-fs (loop9): i_reserved_data_blocks=996 [ 441.444483][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.467637][T29577] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7634'. [ 441.577283][T29584] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7637'. [ 441.857057][T29614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7651'. [ 441.967652][T29624] loop9: detected capacity change from 0 to 512 [ 441.979560][T29624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.019231][T29624] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.033818][T29624] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 442.057324][T29630] loop7: detected capacity change from 0 to 512 [ 442.100423][T29630] loop7: detected capacity change from 0 to 512 [ 442.115098][T29630] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 442.176262][T29630] EXT4-fs (loop7): 1 truncate cleaned up [ 442.189248][T29637] netlink: 'syz.2.7658': attribute type 4 has an invalid length. [ 442.202317][T29630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.223217][T29637] netlink: 'syz.2.7658': attribute type 4 has an invalid length. [ 442.242563][T29630] EXT4-fs (loop7): shut down requested (2) [ 442.255050][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.287021][T29630] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 442.318242][T29630] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 442.346262][T29644] netlink: 'syz.1.7661': attribute type 1 has an invalid length. [ 442.373856][T29644] bond13: entered promiscuous mode [ 442.379794][T29644] 8021q: adding VLAN 0 to HW filter on device bond13 [ 442.410993][T28352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.433206][T29644] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 442.448993][T29644] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 442.478713][T29644] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 442.500916][T29644] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 442.612205][T29658] netlink: 'syz.2.7666': attribute type 4 has an invalid length. [ 442.636907][T29658] netlink: 'syz.2.7666': attribute type 4 has an invalid length. [ 443.879124][T29723] __nla_validate_parse: 4 callbacks suppressed [ 443.879146][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7688'. [ 443.898745][ T242] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.907993][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7688'. [ 443.917130][ T242] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.928221][ T242] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.959129][ T242] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.521946][T29745] serio: Serial port ttyS3 [ 444.669977][T29756] tipc: Started in network mode [ 444.675134][T29756] tipc: Node identity ee174fa01503, cluster identity 4711 [ 444.682542][T29756] tipc: Enabled bearer , priority 0 [ 444.712809][T29760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7700'. [ 444.726571][T29756] syzkaller0: entered promiscuous mode [ 444.732172][T29756] syzkaller0: entered allmulticast mode [ 444.735118][T29760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7700'. [ 444.739841][T29756] tipc: Resetting bearer [ 444.755259][T29760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7700'. [ 444.773293][T29755] tipc: Resetting bearer [ 444.773426][T29760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7700'. [ 444.807091][T29755] tipc: Disabling bearer [ 444.844064][T29766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7706'. [ 444.853265][T29766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7706'. [ 445.040079][T29777] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 445.103994][T29785] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 445.125590][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7715'. [ 445.156668][T29790] 9p: Bad value for 'rfdno' [ 445.222364][T29798] validate_nla: 2 callbacks suppressed [ 445.222384][T29798] netlink: 'syz.7.7720': attribute type 3 has an invalid length. [ 445.255466][T29797] lo speed is unknown, defaulting to 1000 [ 445.264914][T29798] netlink: 'syz.7.7720': attribute type 1 has an invalid length. [ 445.291557][T29798] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.7720'. [ 445.406256][ T28] audit: type=1326 audit(1776526891.800:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.465556][ T28] audit: type=1326 audit(1776526891.800:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.507521][ T28] audit: type=1326 audit(1776526891.800:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.542004][T29817] loop7: detected capacity change from 0 to 1024 [ 445.548787][ T28] audit: type=1326 audit(1776526891.800:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.569305][T29817] EXT4-fs: Ignoring removed bh option [ 445.575256][ T28] audit: type=1326 audit(1776526891.830:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.603058][ T28] audit: type=1326 audit(1776526891.830:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.627780][ T28] audit: type=1326 audit(1776526891.830:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.660503][T29825] netlink: 'syz.1.7730': attribute type 13 has an invalid length. [ 445.670492][ T28] audit: type=1326 audit(1776526891.830:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.696411][ T28] audit: type=1326 audit(1776526891.830:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.698833][T29817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.732962][T29817] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.752168][ T28] audit: type=1326 audit(1776526891.830:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.7.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f00fc819 code=0x7ffc0000 [ 445.783979][T29817] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7727: bg 0: block 112: padding at end of block bitmap is not set [ 445.799663][T29817] EXT4-fs (loop7): Remounting filesystem read-only [ 445.841086][T28352] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 446.602273][T29878] lo speed is unknown, defaulting to 1000 [ 446.722493][T29878] chnl_net:caif_netlink_parms(): no params data found [ 446.779905][T29878] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.787662][T29878] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.796687][T29878] bridge_slave_0: entered allmulticast mode [ 446.803469][T29878] bridge_slave_0: entered promiscuous mode [ 446.812697][T29878] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.820960][T29878] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.829942][T29878] bridge_slave_1: entered allmulticast mode [ 446.837606][T29878] bridge_slave_1: entered promiscuous mode [ 446.860690][T29878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.872892][T29878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.898142][T29878] team0: Port device team_slave_0 added [ 446.906891][T29878] team0: Port device team_slave_1 added [ 446.927239][T29878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.934263][T29878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.960277][T29878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.971701][T29878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.978791][T29878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.005316][T29878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.039062][T29898] tipc: Enabling of bearer rejected, failed to enable media [ 447.058827][T29878] hsr_slave_0: entered promiscuous mode [ 447.066042][T29878] hsr_slave_1: entered promiscuous mode [ 447.072395][T29878] debugfs: 'hsr0' already exists in 'hsr' [ 447.080957][T29878] Cannot create hsr debugfs directory [ 447.141274][T29905] bridge4: entered promiscuous mode [ 447.147531][T29905] bridge4: port 1(macvtap1) entered blocking state [ 447.154116][T29905] bridge4: port 1(macvtap1) entered disabled state [ 447.177351][T29905] macvtap1: entered allmulticast mode [ 447.182878][T29905] bridge4: entered allmulticast mode [ 447.191784][T29905] macvtap1: left allmulticast mode [ 447.191870][T29905] bridge4: left allmulticast mode [ 447.192948][T29905] bridge4: left promiscuous mode [ 447.357900][T29917] lo speed is unknown, defaulting to 1000 [ 447.627444][T29878] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 447.678230][T29878] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 447.753861][T29878] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 447.795812][T29878] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 448.001349][T29878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.052938][T29878] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.097743][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.104892][ T4258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.159093][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.166296][ T4258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.560427][T29878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.822353][T29990] lo speed is unknown, defaulting to 1000 [ 449.273913][T29878] veth0_vlan: entered promiscuous mode [ 449.320484][T29878] veth1_vlan: entered promiscuous mode [ 449.409110][T29878] veth0_macvtap: entered promiscuous mode [ 449.451463][T29878] veth1_macvtap: entered promiscuous mode [ 449.583914][T29878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.667893][T29878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.758852][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.806451][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.888623][T30037] loop5: detected capacity change from 0 to 512 [ 449.889019][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.927233][T30037] EXT4-fs error (device loop5): __ext4_fill_super:5588: inode #2: comm syz.5.7773: iget: bad extra_isize 544 (inode size 256) [ 449.958749][T30037] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 449.959429][ T4258] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.974746][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 449.983755][ C0] EXT4-fs (loop5): initial error at time 1776526896: __ext4_fill_super:5588: inode 2 [ 449.993301][ C0] EXT4-fs (loop5): last error at time 1776526896: __ext4_fill_super:5588: inode 2 [ 450.003561][T30037] EXT4-fs (loop5): get root inode failed [ 450.014759][T30037] EXT4-fs (loop5): mount failed [ 450.306008][T30059] __nla_validate_parse: 3 callbacks suppressed [ 450.306028][T30059] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7777'. [ 450.331892][T30065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7779'. [ 450.356306][T30065] ip6gre2: entered promiscuous mode [ 450.367748][T30065] ip6gre2: entered allmulticast mode [ 450.392952][T30065] netlink: 'syz.5.7779': attribute type 6 has an invalid length. [ 450.403033][T30065] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7779'. [ 450.495673][T30089] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.7781'. [ 450.514377][T30086] ref_ctr increment failed for inode: 0x536 offset: 0x7 ref_ctr_offset: 0x6f6c of mm: 0xffff88810f34a1c0 [ 450.530755][T30089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7781'. [ 450.582235][T30098] netlink: 'syz.9.7786': attribute type 27 has an invalid length. [ 450.643748][T30105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7789'. [ 450.694235][T30113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7789'. [ 450.830215][T30098] ip6gre1: left promiscuous mode [ 450.835347][T30098] ip6gre1: left allmulticast mode [ 450.844250][ T3410] lo speed is unknown, defaulting to 1000 [ 450.879240][T30107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.889138][T30107] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.899130][T30107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.937203][ T4258] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.970933][ T4258] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.021245][ T4258] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.057004][T30114] lo speed is unknown, defaulting to 1000 [ 451.062931][ T4258] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.109602][T20342] lo speed is unknown, defaulting to 1000 [ 451.247359][T30147] loop8: detected capacity change from 0 to 128 [ 451.364191][T30156] netlink: 'syz.1.7797': attribute type 10 has an invalid length. [ 451.573343][T30172] bridge4: entered promiscuous mode [ 451.587849][T30172] bridge4: entered allmulticast mode [ 451.607952][T30178] syz.8.7795: attempt to access beyond end of device [ 451.607952][T30178] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 451.622946][T30172] team0: Port device bridge4 added [ 451.651597][T30180] bridge0: port 1(team0) entered blocking state [ 451.671257][T30180] bridge0: port 1(team0) entered disabled state [ 451.698432][T30180] team0: entered allmulticast mode [ 451.720892][T30180] team0: entered promiscuous mode [ 451.890490][T30147] syz.8.7795: attempt to access beyond end of device [ 451.890490][T30147] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 451.894290][T30191] loop9: detected capacity change from 0 to 512 [ 452.317909][T30222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7806'. [ 452.342987][ T562] kworker/u8:6: attempt to access beyond end of device [ 452.342987][ T562] loop9: rw=1, sector=2424, nr_sectors = 2096 limit=512 [ 452.378323][ T562] kworker/u8:6: attempt to access beyond end of device [ 452.378323][ T562] loop9: rw=1, sector=4520, nr_sectors = 2120 limit=512 [ 452.428905][ T562] kworker/u8:6: attempt to access beyond end of device [ 452.428905][ T562] loop9: rw=1, sector=6640, nr_sectors = 2104 limit=512 [ 452.465417][T30236] lo speed is unknown, defaulting to 1000 [ 452.485587][ T562] kworker/u8:6: attempt to access beyond end of device [ 452.485587][ T562] loop9: rw=1, sector=8744, nr_sectors = 2072 limit=512 [ 452.546465][ T562] kworker/u8:6: attempt to access beyond end of device [ 452.546465][ T562] loop9: rw=1, sector=10816, nr_sectors = 4808 limit=512 [ 452.579848][ T562] kworker/u8:6: attempt to access beyond end of device [ 452.579848][ T562] loop9: rw=1, sector=15624, nr_sectors = 840 limit=512 [ 452.599836][T30242] lo speed is unknown, defaulting to 1000 [ 452.692131][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 452.692210][ T28] audit: type=1326 audit(1776526899.080:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30254 comm="syz.8.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00711c819 code=0x7ffc0000 [ 452.746591][ T28] audit: type=1326 audit(1776526899.110:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30254 comm="syz.8.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00711c819 code=0x7ffc0000 [ 452.778949][T30259] netlink: 'syz.9.7813': attribute type 1 has an invalid length. [ 452.798824][ T28] audit: type=1326 audit(1776526899.120:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30254 comm="syz.8.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb00711c819 code=0x7ffc0000 [ 452.828333][ T28] audit: type=1326 audit(1776526899.120:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30254 comm="syz.8.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00711c819 code=0x7ffc0000 [ 452.851990][T30259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.865749][ T28] audit: type=1326 audit(1776526899.120:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30254 comm="syz.8.7812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00711c819 code=0x7ffc0000 [ 452.901153][T30259] bond2: (slave veth13): Enslaving as an active interface with a down link [ 452.922212][T30259] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 452.929918][T30259] bond2: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 453.192531][T30285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7826'. [ 453.232611][T30285] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7826'. [ 453.405743][T30302] netlink: 'syz.9.7832': attribute type 4 has an invalid length. [ 453.429616][T30302] netlink: 'syz.9.7832': attribute type 4 has an invalid length. [ 453.451588][ T7433] lo speed is unknown, defaulting to 1000 [ 453.503104][ T7433] lo speed is unknown, defaulting to 1000 [ 453.517088][ T3493] lo speed is unknown, defaulting to 1000 [ 453.830093][T30315] loop8: detected capacity change from 0 to 8192 [ 454.835329][T30359] netlink: 'syz.8.7853': attribute type 1 has an invalid length. [ 455.203956][T30402] netlink: 'syz.9.7871': attribute type 4 has an invalid length. [ 455.212998][T30401] tipc: Enabling of bearer rejected, failed to enable media [ 455.242044][T30402] netlink: 'syz.9.7871': attribute type 4 has an invalid length. [ 455.258342][ T3493] lo speed is unknown, defaulting to 1000 [ 455.326296][ T3493] lo speed is unknown, defaulting to 1000 [ 455.333705][ T7433] lo speed is unknown, defaulting to 1000 [ 455.503169][T30424] xt_limit: Overflow, try lower: 0/0 [ 455.630826][T30432] loop9: detected capacity change from 0 to 512 [ 455.681861][T30432] EXT4-fs error (device loop9): ext4_map_blocks:786: inode #11: block 10: comm syz.9.7882: lblock 0 mapped to illegal pblock 10 (length 1) [ 455.721880][T30432] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.722110][T30432] EXT4-fs (loop9): Remounting filesystem read-only [ 455.731504][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 455.731526][ C1] EXT4-fs (loop9): initial error at time 1776526902: ext4_map_blocks:786: inode 11: block 10 [ 455.731563][ C1] EXT4-fs (loop9): last error at time 1776526902: ext4_map_blocks:786: inode 11: block 10 [ 455.866172][T30432] EXT4-fs warning (device loop9): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 455.897395][T30432] EXT4-fs (loop9): 1 orphan inode deleted [ 455.911903][T30432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.128140][T30445] netlink: 'syz.8.7885': attribute type 4 has an invalid length. [ 456.141267][T30447] __nla_validate_parse: 1 callbacks suppressed [ 456.141287][T30447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7887'. [ 456.162325][T30445] netlink: 'syz.8.7885': attribute type 4 has an invalid length. [ 456.181602][T30447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7887'. [ 456.211559][T30449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.357617][T30449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.385976][T30449] bridge_slave_0: left allmulticast mode [ 456.391906][T30449] bridge_slave_0: left promiscuous mode [ 456.398096][T30449] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.414460][T30449] bridge_slave_1: left allmulticast mode [ 456.445518][T30449] bridge_slave_1: left promiscuous mode [ 456.467533][T30449] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.491694][T30449] bond0: (slave bond_slave_0): Releasing backup interface [ 456.508044][T30449] bond0: (slave bond_slave_1): Releasing backup interface [ 456.530472][T30449] team0: Port device team_slave_0 removed [ 456.549740][T30449] team0: Port device team_slave_1 removed [ 456.566111][T30449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.583831][T30449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.603305][T30449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.613182][T30449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.650991][T30449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.698552][T30452] lo speed is unknown, defaulting to 1000 [ 456.876832][T30455] lo speed is unknown, defaulting to 1000 [ 457.093029][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.198705][ T28] audit: type=1326 audit(1776526903.580:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30463 comm="syz.1.7894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fe5b8c819 code=0x0 [ 457.644285][T30478] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7899'. [ 457.671290][T30480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7900'. [ 457.692636][T30478] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7899'. [ 457.764764][T30485] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7902'. [ 457.884007][T30498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7907'. [ 457.934212][T30498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.970516][T30504] loop8: detected capacity change from 0 to 512 [ 457.982245][T30502] macvlan2: entered promiscuous mode [ 457.994549][T30502] bond2: entered promiscuous mode [ 458.000811][T30502] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 458.016085][T30502] bond2: left promiscuous mode [ 458.026894][T30504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.064954][T30504] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.154529][T29878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.252708][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7915'. [ 458.266178][T30523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7915'. [ 458.327034][T30529] serio: Serial port ttyS3 [ 458.476918][T30537] tipc: Started in network mode [ 458.481869][T30537] tipc: Node identity 3edde81bf87a, cluster identity 4711 [ 458.514070][T30537] tipc: Enabled bearer , priority 0 [ 458.617892][T30541] syzkaller0: entered promiscuous mode [ 458.635497][T30541] syzkaller0: entered allmulticast mode [ 458.663638][T30541] tipc: Resetting bearer [ 458.719887][T30536] tipc: Resetting bearer [ 458.761225][T30536] tipc: Disabling bearer [ 458.921744][T30554] loop5: detected capacity change from 0 to 512 [ 458.977466][T30554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.005071][T30554] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 459.061837][T24987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.139712][T30561] netlink: 'syz.1.7928': attribute type 4 has an invalid length. [ 459.188198][T30564] netlink: 'syz.1.7928': attribute type 4 has an invalid length. [ 459.605915][T30576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7932'. [ 459.887329][T30582] IPv6: sit1: Disabled Multicast RS [ 460.514544][T30608] netlink: 'syz.8.7943': attribute type 1 has an invalid length. [ 460.791586][T30614] xt_hashlimit: size too large, truncated to 1048576 [ 461.617305][T30645] __nla_validate_parse: 1 callbacks suppressed [ 461.617322][T30645] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7954'. [ 461.726809][T30654] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.7956'. [ 461.773881][T30654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7956'. [ 462.051074][T30666] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.7961'. [ 462.091783][T30666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7961'. [ 462.126471][T30668] netlink: 'syz.9.7963': attribute type 1 has an invalid length. [ 462.154993][T30668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.185474][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7963'. [ 462.194779][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7963'. [ 462.216683][T30668] macsec1: entered promiscuous mode [ 462.222249][T30668] bond3: entered promiscuous mode [ 462.229310][T30668] macsec1: entered allmulticast mode [ 462.236799][T30668] bond3: entered allmulticast mode [ 462.701634][ T4248] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.713656][ T4248] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.722863][ T4248] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.732736][ T4248] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.962661][T30691] lo speed is unknown, defaulting to 1000 [ 463.156047][T30691] chnl_net:caif_netlink_parms(): no params data found [ 463.264201][T30691] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.286436][T30691] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.310433][T30691] bridge_slave_0: entered allmulticast mode [ 463.328342][T30691] bridge_slave_0: entered promiscuous mode [ 463.336527][T30691] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.351805][T30691] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.360049][T30691] bridge_slave_1: entered allmulticast mode [ 463.366876][T30691] bridge_slave_1: entered promiscuous mode [ 463.389546][T30691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.401561][T30691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.444225][T30691] team0: Port device team_slave_0 added [ 463.458512][T30691] team0: Port device team_slave_1 added [ 463.515666][T30691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.533868][T30691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.597465][T30691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.619116][T30691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.634747][T30691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.690767][T30691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.765531][T30691] hsr_slave_0: entered promiscuous mode [ 463.771819][T30691] hsr_slave_1: entered promiscuous mode [ 463.780213][T30691] debugfs: 'hsr0' already exists in 'hsr' [ 463.787759][T30691] Cannot create hsr debugfs directory [ 464.297177][T30764] geneve2: entered promiscuous mode [ 464.326865][T30691] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.388431][ T4248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 464.413796][ T4248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 464.434071][T30691] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 464.484370][T30691] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 464.547701][ T4248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 464.571981][T30769] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7987'. [ 464.584661][ T4248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 464.615792][T30691] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.870753][T30691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.929714][T30691] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.970161][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.977301][ T4258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.057910][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.065040][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.197539][T30691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 465.248690][T30691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.720598][T30842] netlink: 'syz.2.7996': attribute type 27 has an invalid length. [ 465.806094][T30842] geneve2: left promiscuous mode [ 465.848049][T30843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.860675][T30843] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.883372][T30843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.931526][ T63] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.950673][ T63] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.974723][ T63] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.015507][ T63] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.070250][T30691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.079040][T30850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7998'. [ 466.102998][ T63] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.157590][T30850] bond3: entered promiscuous mode [ 466.172976][T30850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.193973][ T63] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.243735][ T63] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.273536][T30858] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.288066][T30858] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 466.305086][T30858] bond3: (slave sit1): Error -95 calling set_mac_address [ 466.324397][ T63] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.551468][T30898] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8008'. [ 466.662604][T30885] team0: Device gtp0 is of different type [ 466.798054][T30898] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.810123][T30904] macsec2: entered promiscuous mode [ 466.816417][T30904] bond4: entered promiscuous mode [ 466.825592][T30904] bond4: left promiscuous mode [ 466.866899][T30899] lo speed is unknown, defaulting to 1000 [ 466.885806][T30691] veth0_vlan: entered promiscuous mode [ 466.913818][T30691] veth1_vlan: entered promiscuous mode [ 466.946650][T30924] netlink: 'syz.2.8009': attribute type 1 has an invalid length. [ 466.957537][T30691] veth0_macvtap: entered promiscuous mode [ 467.034275][T30924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.050308][T30691] veth1_macvtap: entered promiscuous mode [ 467.416750][T30930] bond4: (slave veth9): Enslaving as an active interface with a down link [ 467.430258][T30924] bond4: (slave dummy0): making interface the new active one [ 467.439868][T30924] dummy0: entered promiscuous mode [ 467.446102][T30924] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 467.483296][T30691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.509139][T30935] bond4 (unregistering): (slave veth9): Releasing active interface [ 467.541354][T30935] bond4 (unregistering): (slave dummy0): Releasing active interface [ 467.552273][T30935] bond4 (unregistering): Released all slaves [ 467.581123][T30691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.612851][ T4258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.627598][ T4258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.637303][T30970] loop9: detected capacity change from 0 to 512 [ 467.648484][ T4248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.675211][ T4248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.693976][T30970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.924122][T30997] loop3: detected capacity change from 0 to 1024 [ 467.961777][T30997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 468.000787][T30997] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.026454][T31005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8016'. [ 468.041813][T31005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8016'. [ 468.697156][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.758278][T31044] netlink: 'syz.9.8020': attribute type 4 has an invalid length. [ 468.800478][T30691] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 468.813271][T31047] netlink: 'syz.9.8020': attribute type 4 has an invalid length. [ 468.823658][T20330] lo speed is unknown, defaulting to 1000 [ 468.834991][T20330] lyz2: Port: 1 Link DOWN [ 468.839457][T20330] lo speed is unknown, defaulting to 1000 [ 468.989287][T31054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8024'. [ 469.024384][T31044] bond3: left allmulticast mode [ 469.039808][T31044] bond3: left promiscuous mode [ 469.045856][T31044] macsec1: left promiscuous mode [ 469.058902][T31044] macsec1: left allmulticast mode [ 469.066420][ T3493] lo speed is unknown, defaulting to 1000 [ 469.096890][ T7432] lo speed is unknown, defaulting to 1000 [ 469.117184][T20330] lo speed is unknown, defaulting to 1000 [ 469.236444][T31066] netlink: 'syz.1.8029': attribute type 4 has an invalid length. [ 469.249979][T31067] lo speed is unknown, defaulting to 1000 [ 469.323860][T31069] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.331136][T31069] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.426523][T31069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.437002][T31069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.511168][ T562] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.527214][ T562] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.557981][ T562] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.580231][ T562] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.591491][T31076] netlink: 'syz.1.8033': attribute type 1 has an invalid length. [ 469.647870][T31076] 8021q: adding VLAN 0 to HW filter on device bond14 [ 469.829966][T31080] bond14: (slave veth13): Enslaving as an active interface with a down link [ 469.878954][T31090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8038'. [ 469.898600][T31085] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 469.908613][T31085] bond14: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 470.098485][T31095] loop9: detected capacity change from 0 to 128 [ 470.358268][T31109] syz.9.8040: attempt to access beyond end of device [ 470.358268][T31109] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 470.381526][T31111] netlink: 'syz.3.8044': attribute type 1 has an invalid length. [ 470.459457][T31113] VFS: Mount too revealing [ 470.511346][T31118] tipc: Failed to remove unknown binding: 66,0,0/0:2945475648/2945475649 [ 470.565026][T31120] netlink: 'syz.8.8049': attribute type 1 has an invalid length. [ 470.573243][T31095] syz.9.8040: attempt to access beyond end of device [ 470.573243][T31095] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 470.601934][T31120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.643199][T31120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.666738][T31120] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 470.678480][T31120] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 470.710009][T31135] netlink: 'syz.2.8052': attribute type 1 has an invalid length. [ 470.725350][T31135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.749767][T31135] bond4: (slave veth15): Enslaving as an active interface with a down link [ 470.760176][T31137] netlink: 'syz.1.8062': attribute type 16 has an invalid length. [ 470.790316][T31135] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 470.808580][T31137] netlink: 'syz.1.8062': attribute type 17 has an invalid length. [ 470.828653][T31135] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 470.925832][T31143] loop8: detected capacity change from 0 to 512 [ 470.933047][T31137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.976329][T31143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.018547][T31151] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8057'. [ 471.115924][T31156] netlink: 'syz.1.8058': attribute type 4 has an invalid length. [ 471.246851][T31156] ip6gre1: left promiscuous mode [ 471.264612][T31156] ip6gre1: left allmulticast mode [ 471.284845][T31156] ipip0: left promiscuous mode [ 471.300342][T31156] ipip0: left allmulticast mode [ 471.320692][T31156] bridge1: left promiscuous mode [ 471.334817][T31156] bridge1: left allmulticast mode [ 471.346880][T31156] ip6gre3: left allmulticast mode [ 471.357248][T31156] sit4: left allmulticast mode [ 471.368108][T31156] ip6tnl3: left promiscuous mode [ 471.383962][T31156] gtp2: left promiscuous mode [ 471.395741][T31156] gretap2: left promiscuous mode [ 471.411220][T31156] ipip1: left promiscuous mode [ 471.422990][T31156] bond0: left allmulticast mode [ 471.435695][T31156] bridge3: left allmulticast mode [ 471.463124][T31156] bond10: left promiscuous mode [ 471.491214][T31156] erspan1: left promiscuous mode [ 471.517060][T31156] bond10: left allmulticast mode [ 471.542884][T31156] erspan1: left allmulticast mode [ 471.561743][T31156] bond11: left allmulticast mode [ 471.577115][T31156] bond12: left promiscuous mode [ 471.594724][T31156] bridge4: left promiscuous mode [ 471.616229][T31156] bond13: left promiscuous mode [ 471.641688][ T4258] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 471.664972][ T4258] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 471.700966][ T4258] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 471.730955][ T4258] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 471.780288][T31168] 8021q: adding VLAN 0 to HW filter on device bond5 [ 471.847425][T31174] bond5: (slave veth17): Enslaving as an active interface with a down link [ 471.889210][T31168] bond5: (slave dummy0): making interface the new active one [ 471.926244][T31168] dummy0: entered promiscuous mode [ 471.961924][T29878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.978096][T31168] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 472.015374][T31174] bond5 (unregistering): (slave veth17): Releasing active interface [ 472.054462][T31174] bond5 (unregistering): (slave dummy0): Releasing active interface [ 472.076309][T31174] bond5 (unregistering): Released all slaves [ 472.148041][T31186] bond5: entered promiscuous mode [ 472.320672][T31197] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8073'. [ 472.367333][T31197] vlan2: entered promiscuous mode [ 472.395496][T31197] bridge0: entered promiscuous mode [ 472.602729][T31206] loop9: detected capacity change from 0 to 164 [ 472.633489][T31208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8078'. [ 472.652047][T31208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8078'. [ 472.665365][T31206] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 472.676588][T31208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8078'. [ 472.699251][T31208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8078'. [ 472.934779][ T28] audit: type=1326 audit(1776526919.320:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.014841][ T28] audit: type=1326 audit(1776526919.320:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.059756][ T28] audit: type=1326 audit(1776526919.320:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.109150][ T28] audit: type=1326 audit(1776526919.320:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.158934][ T28] audit: type=1326 audit(1776526919.320:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.209904][ T28] audit: type=1326 audit(1776526919.320:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.262482][ T28] audit: type=1326 audit(1776526919.320:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.312668][ T28] audit: type=1326 audit(1776526919.320:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.357442][ T28] audit: type=1326 audit(1776526919.320:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.427945][ T28] audit: type=1326 audit(1776526919.320:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31223 comm="syz.1.8085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 473.610875][T31235] loop3: detected capacity change from 0 to 256 [ 473.655102][T31235] msdos: Unknown parameter '01777777777777777777777' [ 473.732641][T31245] xt_CT: No such helper "snmp_trap" [ 473.813472][T31254] xt_time: unknown flags 0xc [ 473.832057][T31254] loop9: detected capacity change from 0 to 512 [ 473.849714][T31254] EXT4-fs: Ignoring removed nobh option [ 473.867835][T31254] EXT4-fs (loop9): orphan cleanup on readonly fs [ 473.902151][T31254] EXT4-fs warning (device loop9): ext4_xattr_inode_get:546: inode #11: comm syz.9.8094: ea_inode file size=4294967295 entry size=6 [ 473.928738][T31254] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 473.942592][T31254] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #15: comm syz.9.8094: corrupted inode contents [ 473.954868][T31254] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.955193][T31254] EXT4-fs error (device loop9): ext4_dirty_inode:6495: inode #15: comm syz.9.8094: mark_inode_dirty error [ 473.975966][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 473.975993][ C0] EXT4-fs (loop9): initial error at time 1776526920: ext4_do_update_inode:5602: inode 15 [ 473.976035][ C0] EXT4-fs (loop9): last error at time 1776526920: ext4_do_update_inode:5602: inode 15 [ 474.004472][T31254] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 474.004772][T31254] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #15: comm syz.9.8094: corrupted inode contents [ 474.022763][T31264] __nla_validate_parse: 1 callbacks suppressed [ 474.022808][T31264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8098'. [ 474.026579][T31254] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 474.041328][T31254] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.8094: mark_inode_dirty error [ 474.073138][T31264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8098'. [ 474.106327][T31254] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 474.106705][T31254] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.8094: mark inode dirty (error -117) [ 474.167329][T31254] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 474.167506][T31254] EXT4-fs warning (device loop9): ext4_evict_inode:285: xattr delete (err -117) [ 474.209756][T31254] EXT4-fs (loop9): 1 orphan inode deleted [ 474.236978][T31254] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 474.302989][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.349441][T31282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8106'. [ 474.503898][T31292] veth0: Caught tx_queue_len zero misconfig [ 474.520289][T31292] ip6tnl0: Caught tx_queue_len zero misconfig [ 474.938261][T31308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8125'. [ 475.263890][T31314] validate_nla: 2 callbacks suppressed [ 475.263906][T31314] netlink: 'syz.9.8115': attribute type 1 has an invalid length. [ 475.339803][T31314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.396780][T31319] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.427595][T31319] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 475.452659][T31319] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 475.775724][T31339] loop8: detected capacity change from 0 to 256 [ 475.809462][T31339] FAT-fs (loop8): Directory bread(block 1285) failed [ 475.835488][T31339] FAT-fs (loop8): Directory bread(block 1286) failed [ 475.876906][T31339] FAT-fs (loop8): Directory bread(block 1287) failed [ 475.893113][T31339] FAT-fs (loop8): Directory bread(block 1288) failed [ 476.045551][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8131'. [ 476.167224][T31352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8133'. [ 476.204227][T31352] vlan2: entered promiscuous mode [ 476.221928][T31352] bridge0: entered promiscuous mode [ 476.329052][T31359] netlink: 'syz.3.8136': attribute type 1 has an invalid length. [ 476.378606][T31362] netlink: 'syz.3.8137': attribute type 1 has an invalid length. [ 476.398626][T31364] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8138'. [ 476.643765][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8142'. [ 476.653222][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8142'. [ 476.715464][T31377] lo speed is unknown, defaulting to 1000 [ 477.481342][T31408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8155'. [ 478.002465][ T35] IPVS: starting estimator thread 0... [ 478.144738][T31428] IPVS: using max 2256 ests per chain, 112800 per kthread [ 478.397854][T31435] loop8: detected capacity change from 0 to 512 [ 478.527392][T31435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 478.672820][T31435] System zones: 1-20 [ 478.695242][T31435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.799801][T29878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.820386][T31448] lo speed is unknown, defaulting to 1000 [ 478.920509][T31453] loop8: detected capacity change from 0 to 512 [ 478.957451][T31453] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 478.987105][T31453] EXT4-fs (loop8): 1 truncate cleaned up [ 478.993250][T31453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.113799][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 479.113819][ T28] audit: type=1326 audit(1776526925.500:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 479.177407][T31466] loop9: detected capacity change from 0 to 128 [ 479.194287][ T28] audit: type=1326 audit(1776526925.500:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 479.236104][T31471] netlink: 'syz.1.8172': attribute type 1 has an invalid length. [ 479.246700][ T28] audit: type=1326 audit(1776526925.570:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc5a609c819 code=0x7ffc0000 [ 479.275501][T31471] bond15: entered promiscuous mode [ 479.281006][T31471] 8021q: adding VLAN 0 to HW filter on device bond15 [ 479.289616][ T28] audit: type=1326 audit(1776526925.570:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc5a609c582 code=0x7ffc0000 [ 479.313772][ T28] audit: type=1326 audit(1776526925.570:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc5a605d04e code=0x7ffc0000 [ 479.338508][ T28] audit: type=1326 audit(1776526925.570:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc5a609c647 code=0x7ffc0000 [ 479.362649][ T28] audit: type=1326 audit(1776526925.570:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5a605d04e code=0x7ffc0000 [ 479.396325][ T28] audit: type=1326 audit(1776526925.570:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5a609c4ab code=0x7ffc0000 [ 479.420807][ T28] audit: type=1326 audit(1776526925.580:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc5a605d04e code=0x7ffc0000 [ 479.446116][ T28] audit: type=1326 audit(1776526925.580:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31465 comm="syz.9.8171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc5a605d04e code=0x7ffc0000 [ 479.472851][T31471] bond15: (slave bridge5): making interface the new active one [ 479.510056][T31471] bridge5: entered promiscuous mode [ 479.531734][T31471] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 479.925654][T29878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.663909][T31518] lo speed is unknown, defaulting to 1000 [ 480.724870][T31528] team0: left allmulticast mode [ 480.750056][T31528] bridge4: left allmulticast mode [ 480.770258][T31528] team0: left promiscuous mode [ 480.790651][T31528] bridge4: left promiscuous mode [ 480.815106][T31528] bridge0: port 1(team0) entered disabled state [ 480.847422][T31528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 480.894244][ T4248] bond0: (slave bond_slave_0): interface is now down [ 480.909243][ T4248] bond0: (slave bond_slave_1): interface is now down [ 480.925137][T31530] team0: No ports can be present during mode change [ 480.985033][ T4248] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 481.014295][ T4248] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 481.077874][ T4248] bond0: now running without any active interface! [ 481.271653][T31539] lo speed is unknown, defaulting to 1000 [ 482.459807][T31620] bond2: entered allmulticast mode [ 482.473467][T31620] bridge1: entered promiscuous mode [ 482.478959][T31620] bridge1: entered allmulticast mode [ 482.486497][T31620] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 482.537165][T31625] netlink: 'syz.8.8208': attribute type 1 has an invalid length. [ 482.608410][T31630] bond3: entered promiscuous mode [ 482.626585][T31630] bond3: entered allmulticast mode [ 482.645229][T31630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.707490][T31625] bridge2: entered promiscuous mode [ 482.731071][T31625] bridge2: entered allmulticast mode [ 482.739000][ T63] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 482.755764][T31625] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 482.765549][T31637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8209'. [ 482.895931][ T4258] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 482.946556][T31664] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 482.953258][T31664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 482.992559][T31664] vhci_hcd vhci_hcd.0: Device attached [ 482.999601][T31674] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 483.006233][T31674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 483.042226][T31674] vhci_hcd vhci_hcd.0: Device attached [ 483.114601][T31674] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 483.121184][T31674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 483.176790][T31674] vhci_hcd vhci_hcd.0: Device attached [ 483.204665][T31689] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 483.211327][T31689] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 483.224751][T20342] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 483.246951][T31689] vhci_hcd vhci_hcd.0: Device attached [ 483.337472][T31683] vhci_hcd: connection closed [ 483.337663][T31690] vhci_hcd: connection closed [ 483.342547][ T242] vhci_hcd vhci_hcd.3: stop threads [ 483.355891][T31675] vhci_hcd: connection closed [ 483.359400][ T242] vhci_hcd vhci_hcd.3: release socket [ 483.387621][T31665] vhci_hcd: connection reset by peer [ 483.396175][ T242] vhci_hcd vhci_hcd.3: disconnect device [ 483.423357][ T242] vhci_hcd vhci_hcd.3: stop threads [ 483.433459][ T242] vhci_hcd vhci_hcd.3: release socket [ 483.448282][ T242] vhci_hcd vhci_hcd.3: disconnect device [ 483.474446][ T242] vhci_hcd vhci_hcd.3: stop threads [ 483.483798][ T242] vhci_hcd vhci_hcd.3: release socket [ 483.499621][ T242] vhci_hcd vhci_hcd.3: disconnect device [ 483.524726][ T242] vhci_hcd vhci_hcd.3: stop threads [ 483.534742][ T242] vhci_hcd vhci_hcd.3: release socket [ 483.554857][ T242] vhci_hcd vhci_hcd.3: disconnect device [ 484.078877][T31746] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8219'. [ 484.109267][T31754] netlink: 'syz.8.8216': attribute type 13 has an invalid length. [ 484.114860][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 484.114914][ T28] audit: type=1326 audit(1776526930.500:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f411338d04e code=0x7ffc0000 [ 484.236925][ T28] audit: type=1326 audit(1776526930.500:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f411338d04e code=0x7ffc0000 [ 484.264746][ T4248] bond3: (slave bridge2): link status up again after 0 ms [ 484.273101][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 484.304721][ T28] audit: type=1326 audit(1776526930.500:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 484.376231][ T28] audit: type=1326 audit(1776526930.550:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 484.418302][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 484.471085][ T28] audit: type=1326 audit(1776526930.550:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 484.550037][ T28] audit: type=1326 audit(1776526930.550:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 484.584793][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 484.627653][ T28] audit: type=1326 audit(1776526930.550:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 484.667928][T31765] netlink: 'syz.9.8227': attribute type 1 has an invalid length. [ 484.687254][T31765] netlink: 'syz.9.8227': attribute type 4 has an invalid length. [ 484.704750][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 484.733397][ T28] audit: type=1326 audit(1776526930.550:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 484.737970][T31765] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.8227'. [ 484.824835][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 484.852481][ T28] audit: type=1326 audit(1776526930.550:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 484.934317][ T28] audit: type=1326 audit(1776526930.550:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31752 comm="syz.2.8221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41133cc819 code=0x7ffc0000 [ 484.962408][ T4258] bond3: (slave bridge2): failed to get link speed/duplex [ 484.972820][T31782] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8234'. [ 484.982788][T31784] netlink: 'syz.2.8236': attribute type 4 has an invalid length. [ 484.993642][T31782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.013799][T31782] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 485.026439][T31784] netlink: 'syz.2.8236': attribute type 4 has an invalid length. [ 485.197650][T31798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8240'. [ 485.216019][T31798] 8021q: VLANs not supported on ip6tnl0 [ 485.640336][T31827] loop9: detected capacity change from 0 to 512 [ 485.703255][T31827] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.8251: inode has both inline data and extents flags [ 485.744739][T31827] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 485.745724][T31827] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.8251: couldn't read orphan inode 15 (err -117) [ 485.754962][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 485.754979][ C0] EXT4-fs (loop9): initial error at time 1776526932: ext4_orphan_get:1397: inode 15 [ 485.755004][ C0] EXT4-fs (loop9): last error at time 1776526932: ext4_orphan_get:1397: inode 15 [ 485.792116][T31827] loop9: lost filesystem error report for type 5 error -117 [ 485.826702][T31827] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.936015][ T63] net_ratelimit: 7 callbacks suppressed [ 485.936076][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 485.994809][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.055040][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 486.174742][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 486.285143][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 486.337525][T31835] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 486.344112][T31835] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 486.394721][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 486.394732][T31835] vhci_hcd vhci_hcd.0: Device attached [ 486.412459][T31838] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 486.419038][T31838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.467188][T31838] vhci_hcd vhci_hcd.0: Device attached [ 486.507629][T31838] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(9) [ 486.514215][T31838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.558788][T31838] vhci_hcd vhci_hcd.0: Device attached [ 486.564436][T31844] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(12) [ 486.571231][T31844] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 486.580570][ T4220] bond3: (slave bridge2): failed to get link speed/duplex [ 486.614839][T31844] vhci_hcd vhci_hcd.0: Device attached [ 486.634750][ T3430] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 486.662691][T31845] vhci_hcd: connection closed [ 486.663172][T31841] vhci_hcd: connection closed [ 486.663490][T31839] vhci_hcd: connection closed [ 486.668011][ T4248] vhci_hcd vhci_hcd.8: stop threads [ 486.695048][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 486.702278][T31836] vhci_hcd: connection reset by peer [ 486.708137][ T4248] vhci_hcd vhci_hcd.8: release socket [ 486.733880][ T4248] vhci_hcd vhci_hcd.8: disconnect device [ 486.750245][ T4248] vhci_hcd vhci_hcd.8: stop threads [ 486.760155][ T4248] vhci_hcd vhci_hcd.8: release socket [ 486.780475][ T4248] vhci_hcd vhci_hcd.8: disconnect device [ 486.806354][ T4248] vhci_hcd vhci_hcd.8: stop threads [ 486.823463][ T4248] vhci_hcd vhci_hcd.8: release socket [ 486.837227][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 486.843999][ T4248] vhci_hcd vhci_hcd.8: disconnect device [ 486.864849][ T4248] vhci_hcd vhci_hcd.8: stop threads [ 486.870127][ T4248] vhci_hcd vhci_hcd.8: release socket [ 486.897518][ T4248] vhci_hcd vhci_hcd.8: disconnect device [ 486.944775][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 487.027360][T20330] IPVS: starting estimator thread 0... [ 487.035068][T31857] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 487.048350][T31857] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 487.121381][T31865] bridge_slave_0: left allmulticast mode [ 487.130060][T31865] bridge_slave_0: left promiscuous mode [ 487.134909][T31858] IPVS: using max 1824 ests per chain, 91200 per kthread [ 487.143388][T31865] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.155713][T31865] bridge_slave_1: left allmulticast mode [ 487.161411][T31865] bridge_slave_1: left promiscuous mode [ 487.170778][T31865] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.193821][T31865] bond0: (slave bond_slave_0): Releasing backup interface [ 487.222530][T31865] bond0: (slave bond_slave_1): Releasing backup interface [ 487.251107][T31865] team0: Failed to send options change via netlink (err -105) [ 487.270551][T31865] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 487.291242][T31865] team0: Port device team_slave_1 removed [ 487.317016][T31865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.333420][T31870] team0: Failed to send options change via netlink (err -105) [ 487.346964][T31870] team0: Mode changed to "activebackup" [ 487.462486][T31904] netlink: 'syz.2.8269': attribute type 29 has an invalid length. [ 487.472166][T31904] netlink: 'syz.2.8269': attribute type 29 has an invalid length. [ 487.481376][T31904] netlink: 'syz.2.8269': attribute type 29 has an invalid length. [ 487.502744][T31904] netlink: 'syz.2.8269': attribute type 29 has an invalid length. [ 487.588482][T31907] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8270'. [ 488.046938][T31950] netlink: 144 bytes leftover after parsing attributes in process `syz.9.8285'. [ 488.120383][ T7433] kernel write not supported for file bpf-map (pid: 7433 comm: kworker/1:8) [ 488.150445][T31960] ªªªªªª: renamed from vlan0 [ 488.268033][T31965] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8291'. [ 488.286213][T31965] ip6gre3: entered promiscuous mode [ 488.292029][T31965] ip6gre3: entered allmulticast mode [ 488.306179][T31965] netlink: 'syz.9.8291': attribute type 6 has an invalid length. [ 488.315873][T31965] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8291'. [ 488.354744][T20342] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 488.409756][T31970] loop9: detected capacity change from 0 to 4096 [ 488.460318][T31970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.484241][ T4220] Bluetooth: hci0: Frame reassembly failed (-84) [ 488.642347][T31988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8299'. [ 488.685692][T31988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8299'. [ 488.795164][T31990] team0: No ports can be present during mode change [ 488.913798][T31999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8304'. [ 488.932957][T31999] ipvlan2: entered allmulticast mode [ 488.939320][T31999] syz_tun: entered allmulticast mode [ 489.210256][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.216636][T32011] netlink: 'syz.3.8307': attribute type 1 has an invalid length. [ 489.268279][T32011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.288251][T32011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.297134][T32011] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 489.361041][T32018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8310'. [ 489.390771][T32018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8310'. [ 490.524736][T25449] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 491.004820][ T242] net_ratelimit: 37 callbacks suppressed [ 491.004837][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 491.136114][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 491.254763][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 491.323685][T32168] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8331'. [ 491.390064][T32168] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8331'. [ 491.399119][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 491.524799][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 491.644744][ T4220] bond3: (slave bridge2): failed to get link speed/duplex [ 491.765351][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 491.914714][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 492.034751][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 492.144750][ T4220] bond3: (slave bridge2): failed to get link speed/duplex [ 492.438637][ T3430] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 492.875991][T32228] netlink: 'syz.8.8346': attribute type 1 has an invalid length. [ 492.926581][T32228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.969373][T32230] bond5: (slave geneve2): making interface the new active one [ 492.998810][T32230] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 493.033711][ T63] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.054232][ T63] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.083354][ T63] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.098431][T32234] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8336'. [ 493.112061][T32240] netlink: 'syz.8.8349': attribute type 2 has an invalid length. [ 493.120553][ T63] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.126298][T32240] netlink: 'syz.8.8349': attribute type 2 has an invalid length. [ 493.196408][T32248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8350'. [ 493.445762][T32265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8357'. [ 493.607221][T32279] loop3: detected capacity change from 0 to 764 [ 493.648155][T20342] kernel read not supported for file [fscontext] (pid: 20342 comm: kworker/0:15) [ 493.649004][T32279] rock: directory entry would overflow storage [ 493.691769][T32279] rock: sig=0x5245, size=8, remaining=5 [ 493.870697][T32303] loop3: detected capacity change from 0 to 128 [ 493.886965][T32306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8368'. [ 494.042301][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.042301][ T63] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 494.071280][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.071280][ T63] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 494.106344][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.106344][ T63] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 494.142151][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.142151][ T63] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 494.189718][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.189718][ T63] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 494.255092][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.255092][ T63] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 494.320884][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.320884][ T63] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 494.380286][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.380286][ T63] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 494.397236][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.397236][ T63] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 494.413783][ T63] kworker/u8:4: attempt to access beyond end of device [ 494.413783][ T63] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 494.452246][ T28] kauditd_printk_skb: 598 callbacks suppressed [ 494.452266][ T28] audit: type=1400 audit(1776527452.847:5040): avc: denied { setopt } for pid=32332 comm="syz.1.8378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 495.136888][T32348] netlink: 'syz.2.8382': attribute type 1 has an invalid length. [ 495.180547][T32348] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.200506][T32350] bond6: entered promiscuous mode [ 495.253162][T32348] bond6: (slave dummy0): making interface the new active one [ 495.308352][T32348] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 495.356186][T32350] bond6 (unregistering): left promiscuous mode [ 495.375527][T32350] bond6 (unregistering): (slave dummy0): Releasing active interface [ 495.397430][T32350] bond6 (unregistering): Released all slaves [ 495.568345][T32352] batadv0: Caught tx_queue_len zero misconfig [ 495.944305][T32376] lo speed is unknown, defaulting to 1000 [ 496.064726][ T242] net_ratelimit: 29 callbacks suppressed [ 496.064748][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 496.244991][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 496.444804][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 496.564748][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 496.687716][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 496.806671][T32432] syz_tun: entered allmulticast mode [ 496.824842][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 496.843799][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8408'. [ 496.884088][T32430] syz_tun: left allmulticast mode [ 496.941316][T32441] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8411'. [ 496.944950][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 496.980906][T32441] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8411'. [ 497.095227][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 497.110811][T32459] loop9: detected capacity change from 0 to 1024 [ 497.145850][T32459] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 497.175030][T32459] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 497.194851][T32459] EXT4-fs (loop9): orphan cleanup on readonly fs [ 497.205482][T32459] EXT4-fs error (device loop9): __ext4_get_inode_loc:4797: comm syz.9.8418: Invalid inode table block 0 in block_group 0 [ 497.218256][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 497.238016][T32459] loop9: lost filesystem error report for type 5 error -117 [ 497.238133][T32459] EXT4-fs (loop9): Remounting filesystem read-only [ 497.245582][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 497.245606][ C1] EXT4-fs (loop9): initial error at time 1776527455: __ext4_get_inode_loc:4797 [ 497.245634][ C1] EXT4-fs (loop9): last error at time 1776527455: __ext4_get_inode_loc:4797 [ 497.337831][T32459] Quota error (device loop9): write_blk: dquota write failed [ 497.344887][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 497.346150][T32459] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 497.362727][T32459] EXT4-fs (loop9): 1 truncate cleaned up [ 497.369117][T32459] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.497257][T25393] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.191177][T32498] loop9: detected capacity change from 0 to 512 [ 498.198049][T32498] EXT4-fs: Ignoring removed oldalloc option [ 498.204449][T32498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 498.230531][T32498] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.8428: iget: bad i_size value: 38620345925642 [ 498.243356][T32498] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 498.243788][T32498] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.8428: couldn't read orphan inode 15 (err -117) [ 498.253016][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 498.253035][ C1] EXT4-fs (loop9): initial error at time 1776527456: ext4_orphan_get:1397: inode 15 [ 498.253061][ C1] EXT4-fs (loop9): last error at time 1776527456: ext4_orphan_get:1397: inode 15 [ 498.292618][T32498] loop9: lost filesystem error report for type 5 error -117 [ 498.302525][T32498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.394339][T32508] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8429'. [ 498.661314][ T63] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 498.724596][ T63] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 498.789064][ T63] EXT4-fs (loop9): This should not happen!! Data will be lost [ 498.789064][ T63] [ 498.819172][ T63] EXT4-fs (loop9): Total free blocks count 0 [ 498.836878][ T63] EXT4-fs (loop9): Free/Dirty block details [ 498.872205][ T63] EXT4-fs (loop9): free_blocks=0 [ 498.890446][ T63] EXT4-fs (loop9): dirty_blocks=16000 [ 498.909288][ T63] EXT4-fs (loop9): Block reservation details [ 498.935980][ T63] EXT4-fs (loop9): i_reserved_data_blocks=16000 [ 499.019189][ T63] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 499.119250][T25393] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 500.335930][T32572] loop8: detected capacity change from 0 to 512 [ 500.366456][T32572] EXT4-fs: Ignoring removed nobh option [ 500.395130][T32572] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 500.415148][T32572] EXT4-fs (loop8): 1 truncate cleaned up [ 500.421423][T32572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.653880][T32584] netlink: 'syz.9.8458': attribute type 4 has an invalid length. [ 500.669153][T32584] netlink: 17 bytes leftover after parsing attributes in process `syz.9.8458'. [ 501.115727][T29878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.144897][ T562] net_ratelimit: 28 callbacks suppressed [ 501.144949][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 501.247990][T32606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 501.274108][ T28] audit: type=1400 audit(1776527459.667:5041): avc: denied { read } for pid=32603 comm="syz.9.8465" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 501.297293][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 501.425923][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 501.473902][T32623] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8470'. [ 501.498578][T32627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8471'. [ 501.544738][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 501.587173][ T28] audit: type=1326 audit(1776527459.987:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.629215][T32639] loop8: detected capacity change from 0 to 512 [ 501.639499][ T28] audit: type=1326 audit(1776527459.987:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.663254][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 501.675298][ T28] audit: type=1326 audit(1776527459.987:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.699513][ T28] audit: type=1326 audit(1776527459.987:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.723772][ T28] audit: type=1326 audit(1776527459.987:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.735770][T32639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.771639][ T28] audit: type=1326 audit(1776527460.007:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.795769][ T28] audit: type=1326 audit(1776527460.007:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.805044][ T63] bond3: (slave bridge2): failed to get link speed/duplex [ 501.819604][ T28] audit: type=1326 audit(1776527460.007:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.850140][ T28] audit: type=1326 audit(1776527460.007:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32636 comm="syz.1.8476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe5b8c819 code=0x7ffc0000 [ 501.960715][T32639] ================================================================== [ 501.968970][T32639] BUG: KCSAN: data-race in filemap_read / filemap_read [ 501.975949][T32639] [ 501.978303][T32639] write to 0xffff888133d67528 of 8 bytes by task 32651 on cpu 1: [ 501.986049][T32639] filemap_read+0x98d/0xa10 [ 501.990674][T32639] generic_file_read_iter+0x79/0x330 [ 501.996001][T32639] ext4_file_read_iter+0x1cc/0x290 [ 502.001134][T32639] copy_splice_read+0x471/0x6c0 [ 502.006006][T32639] splice_direct_to_actor+0x28f/0x670 [ 502.011407][T32639] do_splice_direct+0x119/0x1a0 [ 502.016285][T32639] do_sendfile+0x382/0x650 [ 502.020735][T32639] __x64_sys_sendfile64+0x105/0x150 [ 502.025965][T32639] x64_sys_call+0x2dc4/0x3020 [ 502.030681][T32639] do_syscall_64+0x12c/0x370 [ 502.035343][T32639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.041272][T32639] [ 502.043632][T32639] read to 0xffff888133d67528 of 8 bytes by task 32639 on cpu 0: [ 502.051315][T32639] filemap_read+0x6f/0xa10 [ 502.055769][T32639] generic_file_read_iter+0x79/0x330 [ 502.061083][T32639] ext4_file_read_iter+0x1cc/0x290 [ 502.066217][T32639] copy_splice_read+0x471/0x6c0 [ 502.071094][T32639] splice_direct_to_actor+0x28f/0x670 [ 502.076493][T32639] do_splice_direct+0x119/0x1a0 [ 502.081381][T32639] do_sendfile+0x382/0x650 [ 502.085828][T32639] __x64_sys_sendfile64+0x105/0x150 [ 502.091054][T32639] x64_sys_call+0x2dc4/0x3020 [ 502.095762][T32639] do_syscall_64+0x12c/0x370 [ 502.100380][T32639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.106292][T32639] [ 502.108631][T32639] value changed: 0x0000000000000091 -> 0x0000000000000092 [ 502.115748][T32639] [ 502.118088][T32639] Reported by Kernel Concurrency Sanitizer on: [ 502.124261][T32639] CPU: 0 UID: 0 PID: 32639 Comm: syz.8.8477 Tainted: G W syzkaller #0 PREEMPT(full) [ 502.135236][T32639] Tainted: [W]=WARN [ 502.139085][T32639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.149158][T32639] ================================================================== [ 502.159068][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 502.294836][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 502.335600][T29878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.404913][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 502.514766][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 505.507949][ T562] bond0 (unregistering): Released all slaves [ 505.515492][ T562] bond1 (unregistering): Released all slaves [ 505.568468][ T562] IPVS: stopping master sync thread 10933 ... [ 505.593480][ T562] hsr_slave_0: left promiscuous mode [ 505.600678][ T562] veth1_macvtap: left promiscuous mode [ 505.606722][ T562] veth0_macvtap: left promiscuous mode [ 505.612249][ T562] veth1_vlan: left promiscuous mode [ 505.617691][ T562] veth0_vlan: left promiscuous mode [ 505.879167][ T562] IPVS: stop unused estimator thread 0... [ 506.234752][ T4248] net_ratelimit: 32 callbacks suppressed [ 506.234769][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 506.354751][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 506.464754][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 506.584770][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 506.704782][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 506.815123][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 506.924831][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 507.034783][ T4248] bond3: (slave bridge2): failed to get link speed/duplex [ 507.144773][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 507.254775][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 511.264807][ T242] net_ratelimit: 35 callbacks suppressed [ 511.264830][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 511.384757][ T242] bond3: (slave bridge2): failed to get link speed/duplex [ 511.494762][ T562] bond3: (slave bridge2): failed to get link speed/duplex [ 511.604784][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 511.724779][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 511.834754][ T4227] bond3: (slave bridge2): failed to get link speed/duplex [ 511.944769][ T242] bond3: (slave bridge2): failed to get link speed/duplex