last executing test programs: 3.006752311s ago: executing program 3 (id=537): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 3.006210031s ago: executing program 3 (id=538): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000"/20, @ANYBLOB="0000000000000000b31fb649e55c738ec8"], 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001980)=ANY=[@ANYBLOB="5400000002fd17376afbdbb7dd9227debaf809f51616018c84b30e92c614ff4d102b8c5a38da288e1e60394d6277b430949ffe34e37f30daff63a39c218b1a56372c776712ecd589ae1b3f94d8442c1452d67deb310114aa61239c9eee012628c84bc524e1ffcc1e1cd56f793710d417e77decafa1924a24077fe545658d4b13f743e84c758b1ca12a70286c6e52ecf40c1b0a967f91ad4f374fab14d89de8c037a56910e960ca903cecfb23f14074c3dafa42f854a5dc90135a245f4fbddd770dcdb9c797c577fbaa", @ANYBLOB="c3d2a1b4e246972f8592369a5b562a4cfbb8c752a202e84f3c9058259e5723938699d722706f372093ff9a2d8f13ac8a71d6fd85678391bfef9e49dd43c7ce0817c4d3858cd49bc3f0ce2d23fa6052fde9ff3f75dfae20bf015a877c63fd656a5e3c39104103ca9d14abe7f192e6a74dae5406", @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac143400080002000500000008000800ac1e000106000b"], 0x54}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="8002020c0a00020057ff0200aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x40) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000000}, 0x0, 0x0, 0xeada}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000001540), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000006940)="45d8dbb09bcdf7e85e4aba0445f4c017", 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r6, 0x2000, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) rt_sigaction(0x39, &(0x7f0000001700)={&(0x7f0000001640)="660f3a09d412c422113ac726410f4d92a7ec0000c4224993b4b8ffefffffc4012d691bf0099dedd8ffd241adc4837d395f0cfec4615a5259a1c443a944c509", 0x80000003, &(0x7f0000001680)="26660f3801803ead00000f4b35f5ff0000f246aa43816d0a7fb00000c4a238f54183c421a96a0fc4212561a10800000066400f38f88c2703000000f2440f2ba900000000660f73d000", {[0x2]}}, &(0x7f00000017c0)={&(0x7f0000001740)="2e40df410041adc4c1c5ed17c463c16ed47a2e2636440fd88100000000262ef30f8b67000000c401456c3ec481fc50f947a7c4a2791ebf2b1c8241", 0x0, &(0x7f0000001780)="c4427d5aa800000100400f380413c4c2258e4fb3f2aec4e1685e52e9c4e13c5d841094000000660f380bdbd9f20f741fc4c1e973d0a4"}, 0x8, &(0x7f0000001800)) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r4, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@abs={0x1}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000180)="230d6a3fd6689c721561a3ffc4f21184c2ec4a86a7477a97c5fcae07b93ee162b18c58b24452cf7ccb55abffa52e78cfb71dfc115c59133970ef899e8f60e6bf5715fd52c36d3b0286f97efbc655b4ae267b64411989584dc0a30e7ffb081f58e226d607ce06accd97e809c51ebae802256e5298ada33070e7cba9acf3", 0x7d}, {&(0x7f0000000200)="77b131ab3bd44b857b3d14a198b7139fc66100771c33745b2371577e80182b30e99b96d9b03ac4fbd259017ea5c58a118485ffc80579e6f6b7e077fbc696c6ea0f2fb5d757bd0cec8febc0e6be8398ffef288ded8c39b449953b8ef4e2a2dcc1f47ac08ee97c8f991ab899b276cc9a511a17a22bd6b8cfe756b2c28f536d30e9b028dd3062075b9a8bd7d98672030d2ff6ff4a01f668285d3c95ce", 0x9b}, {&(0x7f0000001580)="a88509b234416266033c5ff4b326ae12715c0e2bc4f1c2b32e182b1e12456c3a17e1589700ff4dfc115feda82187ff896d58adf448d4cefc6aa8fb687fdc262c19916d18afcfb67ca80fc4b1956d578ced759d3cd274bc21000d65a8ac95f5f75c747b1baf5a69dd154886859c5a1d0b6b09620309ffc4ad11d3f57035dd15a925136b52d2a1da79f62abdf234922071747632afa6b932ff96a715c57454d90adc94b2a7036ca4abb84dba3879df42a21d942dce8ae633c070", 0xb9}, {&(0x7f0000000380)="6e2a84960bb56a93793f91aa7741bed2eb73be41b179a6b4202415e3b3ec74b03d855d91", 0x24}, {&(0x7f00000003c0)="4528e2174af4c344c497a43f", 0xc}, {&(0x7f0000000400)="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", 0xfe0}], 0x6}}], 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getcwd(&(0x7f0000001400)=""/96, 0x60) close_range(r3, 0xffffffffffffffff, 0x0) 2.13250028s ago: executing program 3 (id=550): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r4], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x8}], 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1400000010000100007ccaa32c000000000000000000000a20000000000a01080000000000000000010000000900010073797a30200000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000050000000060a010400000000000000000100000008000b6d3300000028000480240001800b0001006f626a7265660008020340000000000900010073797a30000000001400000011000100000000436d5f60000000000ae8cd1f7e3e82d2f16ec1d091edc0f8556f0000"], 0xc4}}, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xe8, 0xe8, 0x1f0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@arp={@dev, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x12c0, 0x2c, 0x310, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3}, {0xffe0, 0xfff2}, {0x7, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xae6d}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff6}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0x9c0, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x101, 0x0, 0x3, 0x6, 0x7f, 0x7, 0xa5d, 0x7fff, 0x2, 0x0, 0x2, 0xcb, 0x2, 0x49ea483a, 0x7, 0x2, 0x15, 0x200, 0x6, 0x2eb11492, 0x3, 0x6, 0xd11, 0x2, 0x4, 0x6, 0x3, 0x4, 0x1, 0x1, 0xfffffc00, 0x1, 0x200, 0x80000000, 0x8e12, 0x300, 0xd, 0x7fffffff, 0x5, 0x7fffffff, 0x6, 0x1, 0x4, 0x8, 0x9, 0xf9, 0x9, 0x0, 0x5, 0x0, 0x2, 0xb, 0x6, 0x1, 0x10001, 0xf, 0x400, 0xad5, 0x6, 0xe, 0x46, 0x200, 0x7, 0x100, 0x1, 0x9, 0x9c04, 0x401, 0x8, 0x9, 0x8, 0x3, 0x9, 0x1, 0x4, 0x0, 0xfff, 0x8001, 0x1, 0x4, 0x100, 0x100, 0x6, 0x0, 0x7, 0xfffffff8, 0x8, 0x5, 0x7, 0x200, 0x5, 0xfffffffa, 0x8ce, 0xfffffff7, 0xe9d, 0x80000000, 0xaf1b, 0x7, 0x638, 0xfffffc00, 0x9, 0x0, 0x6, 0xa, 0x2, 0xa, 0x200, 0x1, 0xfffffff3, 0x3, 0x400, 0x4, 0xf, 0x5, 0x6, 0xeac, 0x3, 0x5, 0x8001, 0x7, 0xfffffe01, 0x401, 0xfffffffb, 0x9, 0x8, 0x5, 0x333dd391, 0xfff, 0x7, 0xfffffff7, 0x7f8f, 0x1, 0x5, 0x6, 0x2, 0x1, 0x0, 0x7fffffff, 0x3, 0x6, 0x1db, 0x3, 0xfffffff1, 0x6, 0xff, 0x8, 0x10000, 0xe9, 0x795, 0x5, 0x2, 0x100, 0x4, 0x2, 0x81, 0x302, 0x3, 0x200, 0xa, 0xf, 0xff, 0xff, 0x100, 0x5, 0xffffffff, 0x8, 0x58e, 0x1ff, 0x8, 0x10000, 0x8, 0x5fe09c4c, 0x6, 0x4, 0x9, 0x8d, 0x3, 0x9290, 0x9, 0x5, 0x2, 0x6, 0x401, 0x70, 0xffff, 0x2, 0x8, 0x1, 0xfff, 0x9, 0x57f1, 0x5, 0xff, 0xd4, 0x5, 0x1, 0x0, 0x9, 0x3, 0x3f4, 0x8, 0x5, 0x9, 0x6, 0x8, 0x6e0, 0x7, 0x1, 0x400, 0xa, 0x9, 0x3, 0x2, 0x7313843, 0x2, 0x5f, 0xffffffff, 0x2cc, 0x3, 0x7, 0x7, 0x2, 0x2, 0x8d8, 0x1, 0x4, 0x2, 0x6, 0x8, 0xd21, 0x27, 0x80000001, 0xa, 0xffff, 0xf73, 0x3, 0xdc, 0xd06, 0x1, 0xe7b1, 0x8, 0x673, 0x4, 0x7, 0x5, 0xffffffff, 0x8, 0x401, 0xfff, 0x1ff, 0x25, 0x3, 0x363d, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0x0, 0x4, 0x9, 0x3, 0x7, 0x8, 0x400, 0x7, 0x1, 0xa, 0x7, 0x7fff, 0x6, 0x71, 0x9, 0x400, 0x7, 0x7, 0x7, 0x9, 0x7998, 0x0, 0xab1, 0x1, 0x3, 0x6b3eb683, 0xf550, 0xffff, 0x8000, 0x1, 0x3, 0x7, 0xcc07, 0x9e6, 0x5, 0x6, 0x200, 0x6, 0x2, 0x7, 0x1000, 0xe, 0x6, 0x101, 0x5, 0x7, 0x3, 0xea, 0x9, 0x66e18cb3, 0x7, 0x4, 0x5, 0xff, 0x0, 0x68, 0x8000, 0x80, 0x38000, 0x6, 0x7, 0xb52b, 0x3, 0x4, 0x8, 0x9, 0x8000, 0x0, 0x2, 0x8b4, 0x5, 0x2, 0x400, 0xf, 0x8, 0x1, 0x5, 0x10000, 0x5, 0xff, 0x1, 0x0, 0x400, 0x7, 0x4, 0x7f, 0xffff, 0xffffffff, 0x400, 0x0, 0x0, 0x1, 0x4f1273fe, 0x1, 0x20a, 0x5, 0x9, 0x2, 0x101, 0x10000, 0x2, 0x2, 0x8, 0x401, 0x5, 0xffffb28c, 0x8, 0x3, 0x9, 0x7, 0x5, 0x2, 0xf0a6, 0x6, 0x2, 0x400, 0x8, 0xc, 0x0, 0x1, 0x4, 0x2, 0x2, 0x4, 0x4, 0x800, 0x4, 0x7ff, 0x400, 0x2, 0x9, 0x4, 0x2, 0x9, 0x0, 0x7, 0x84d, 0x1, 0x4, 0x8, 0xc, 0x10, 0x2, 0xa19, 0x2, 0x800, 0x10000, 0x2, 0x9, 0x0, 0xfffffffb, 0x497, 0x8, 0xf8, 0xf, 0x4, 0x0, 0x1, 0x9, 0x8, 0x6, 0x0, 0x9, 0xffbc, 0x6, 0x101, 0x3, 0x2, 0x2, 0xa, 0x6, 0x7fffffff, 0x9, 0x5, 0x89, 0x5, 0x89, 0x0, 0xa59, 0x6, 0xa61, 0x3ff, 0x3, 0x8, 0x4a6, 0x1, 0x6e, 0x1, 0xe58, 0x5, 0x9, 0x200, 0x3, 0xe, 0xfff, 0x0, 0xffff, 0x7000, 0x100, 0x3, 0x3, 0xfffffffe, 0x4, 0x1, 0x546, 0x80000000, 0x7fffffff, 0x40, 0x9dd, 0x46, 0x9, 0x7fff, 0x9, 0x4, 0x7, 0x4, 0x9c2, 0x2, 0x80000000, 0xd2a1fef, 0xf75, 0x8, 0x5, 0xe5b, 0xac, 0x1, 0xff, 0x7, 0x0, 0x81, 0x5f, 0x401, 0x9, 0x53, 0xfff, 0x0, 0x8, 0x200, 0xffff5f7b, 0xffff, 0x5, 0x2, 0xfff, 0x1bb, 0x7, 0x51fa, 0xff, 0xb, 0x80, 0x1ff, 0x9, 0x7, 0x68a4, 0x3]}]}, @TCA_CGROUP_ACT={0x1b0, 0x1, [@m_csum={0xf8, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x2, 0x2, 0x4, 0xfff}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x875, 0x9, 0x7, 0x4, 0x200}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x10000000, 0x9, 0x7ff}, 0x58}}]}, {0x78, 0x6, "070574c15cd068b47bdd302346e91b6ff468a35bc2777d12fcee26d2322591063590814d0b8172196568d25f3bbb3e68a282ff219d6a5501d90fcac2f9c080b2b62758aa620f0fbf8ea475a0c1cab49c7ed0014a84acd95cbd5c7c81b44ef33ad44e809ae0535f7686a6f922e00c3d62244b3749"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xb4, 0x18, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0x6, 0x7, 0x80000000, 0x5}}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4d, 0x6, "f8fef9156748761c611ab8244c3017fea583fbae6a3a5029eb980a91128481a5f93af474769704abf9c748295f7c347a862c4a121e5da643c3201d4c143672bc6a7ffe79791eda6d67"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x850, 0x2, [@TCA_ROUTE4_POLICE={0x844, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xc, 0xfffffffe, 0x7, 0x1, 0xcc, 0x479, 0x3, 0xf, 0x188, 0x6, 0x5a9, 0x9, 0x9, 0x8, 0x70, 0x2, 0x10001, 0x10, 0x800, 0xe0, 0xc4b5, 0x7, 0x80, 0x8, 0x1, 0x1ff, 0x5, 0x5, 0xffff, 0x73, 0x5, 0x47, 0xb97, 0x5285, 0x800, 0x9, 0x3, 0x3ff, 0x2, 0x6, 0x24, 0x8, 0x4, 0x4, 0xffffffff, 0x7, 0xc7, 0x7323, 0xfffffffa, 0x5, 0x8001, 0x493, 0x1, 0x2de8b72, 0xfffffffb, 0x4, 0x6, 0xffff, 0x7, 0x95, 0x2, 0xffff, 0x4, 0x8, 0x9, 0xb, 0x7, 0x7d9, 0x2, 0x2, 0x0, 0x4, 0x6f17, 0x2, 0x3, 0x80, 0xb, 0x8, 0xe3, 0x444a, 0x4, 0x2, 0x81, 0x80, 0x7787, 0x4, 0x1, 0x101, 0xffffffe1, 0x9, 0x2, 0x1, 0x2, 0x3, 0x800, 0x3, 0x1ff, 0x3, 0x4, 0x4, 0x3, 0x8, 0xf7b4, 0x7, 0x8, 0x2, 0x10, 0x8, 0xfffff000, 0x6, 0x3ff, 0xfffffe01, 0x9, 0x9, 0x4, 0x732, 0x800, 0xd, 0xc, 0x2, 0xfffffff8, 0x1, 0x5, 0x2e5e, 0x9, 0xa, 0x2, 0x0, 0x8, 0x81, 0x2, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1, 0x2, 0x8, 0x2, 0xba12, 0xdf5, 0x5, 0x93, 0x8, 0x9, 0x8, 0x5, 0x8, 0xffffffff, 0x0, 0xb041, 0x0, 0x4, 0x0, 0xffffff01, 0xb, 0x27cf, 0x3, 0x4, 0x101, 0x2, 0x5, 0x5, 0xa8, 0xd, 0x7, 0x19, 0x7, 0x1, 0x0, 0x3, 0x10001, 0xffffffff, 0xa4d, 0x4, 0xffffff97, 0x8, 0x8000, 0x5, 0x6, 0xfffffff9, 0x4, 0x10, 0xd19, 0x6b, 0x7fffffff, 0x3, 0x0, 0x0, 0x93b, 0x82, 0x7fffffff, 0x9, 0x9, 0xc54, 0x7, 0x4, 0x6, 0x1, 0x7, 0x8, 0x10, 0x0, 0x0, 0x1ff, 0x9759, 0x4, 0x9, 0x2, 0xed, 0x0, 0x0, 0x0, 0xb, 0x7fffffff, 0xfff, 0x2, 0x9, 0x1, 0xfff, 0x4, 0x8, 0x5, 0x0, 0x7ff, 0xffffff3a, 0x5, 0x0, 0x5, 0x100, 0x8, 0x1, 0x8, 0x2, 0x4, 0x3, 0xf46, 0x6, 0xfffffffd, 0xfffffffb, 0x26d6c910, 0x2, 0x7, 0x8, 0x3, 0x5, 0x7, 0x32253b1d, 0x3, 0x107, 0x5, 0xae0b, 0x100, 0xfb1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x82}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x80, 0x40, 0xd9b, 0x1, 0x7fff, 0x3, 0x1b2, 0x5, 0x3, 0x2, 0x661bb9b, 0x7, 0x4, 0x6, 0x8, 0x8, 0x0, 0xbcc, 0x3, 0xe, 0x2, 0x87, 0x1, 0x7fffffff, 0xe6, 0x8, 0x2, 0x860a, 0x5, 0x7, 0x4, 0x4, 0x7, 0x8, 0x1, 0x5, 0x2, 0x7, 0xd, 0x6, 0x4ba, 0x3, 0xf, 0x2b, 0xc68e, 0x3163f234, 0x7, 0x806b, 0x7, 0x10, 0x6, 0x4, 0xbb, 0x0, 0x3a, 0x3, 0x4, 0x7, 0x1, 0xcdf, 0x90b, 0x3, 0x1, 0x2, 0x2, 0x379c, 0x71, 0x5, 0x7, 0xe2e, 0xe49, 0x5, 0x3, 0x7ff, 0x8, 0x8, 0x8fb1, 0x9, 0x100, 0x2, 0x2, 0x7, 0x98, 0x0, 0x3, 0x8, 0x2d860bd9, 0xfff, 0x6, 0x588ce4a, 0x6, 0x9, 0xfffff801, 0xfffffff9, 0x4, 0x6, 0x8001, 0x8, 0xf, 0x401, 0x10000, 0x8000, 0x0, 0x81, 0x2, 0x8, 0x4, 0x2, 0x8000, 0x7, 0x4000000, 0x6, 0x1ff, 0x0, 0x1, 0x10001, 0xa0, 0x8, 0x9, 0x9, 0x2, 0x10, 0x2, 0x1, 0x3ff, 0x6d953e13, 0x9, 0x100, 0x5, 0xfffffffe, 0x0, 0x5, 0x6, 0x1, 0x0, 0x5, 0x8, 0x2, 0x4, 0x40, 0x4, 0x8, 0x80, 0x73, 0xfff, 0x101, 0x5, 0x2, 0x4, 0xe, 0x71, 0x6, 0x7ff, 0x400, 0x3, 0x7000000, 0xd, 0x80000001, 0x1, 0x1, 0x0, 0x400, 0x200, 0x3ff, 0x1, 0xfffffffb, 0x2, 0x10, 0x45cdf753, 0x8, 0x3, 0xbe3e, 0x401, 0xb4, 0xc, 0x7, 0xf, 0x0, 0x0, 0x9, 0x6d0, 0xe8, 0x1, 0x29f1, 0x697, 0x4d, 0x9, 0x10000, 0x80000001, 0x0, 0x8, 0x1, 0x800, 0x2, 0x3, 0x4, 0xb, 0xffff, 0x5, 0x800, 0x731, 0x4, 0x8, 0x4, 0xffff, 0x8, 0x4, 0xbd9, 0x63c1, 0xf35, 0xef2, 0x0, 0x6, 0x2, 0xb41d, 0x4, 0x400, 0x3, 0x80000, 0x87, 0xc8, 0x800, 0xa7ba, 0x4, 0xfffffff0, 0x3, 0x40, 0x0, 0x1, 0x4, 0xde, 0x7, 0x3, 0x5, 0x8, 0x2402, 0x10001, 0x1000000, 0x5, 0x1, 0x5, 0x3, 0x0, 0x80, 0x3, 0x8, 0x1, 0x0, 0x6, 0x8000, 0x1, 0x3, 0x8, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x13}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa10b}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x54}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}]}}]}, 0x12c0}}, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) 1.869080121s ago: executing program 0 (id=552): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc02081, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x2, 0x5, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x305) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc54e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x13, 0xd2, &(0x7f0000001000)}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) 1.868662701s ago: executing program 0 (id=553): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000009c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4c6, &(0x7f0000000100)="$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") r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) epoll_pwait(r2, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010200d50d37a700000011000000080001"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) creat(&(0x7f0000000e00)='./file0\x00', 0x0) mknod$loop(0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) 1.7603104s ago: executing program 2 (id=555): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.742865811s ago: executing program 2 (id=557): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) shutdown(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.729378653s ago: executing program 2 (id=558): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="19010000000000ff0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0xa87f852713bc3d48, 0x20, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x400, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000140)='rxrpc_client\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000140)='rxrpc_client\x00', r2}, 0x10) socket$kcm(0x21, 0x2, 0x2) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) sendmmsg$inet(r4, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b80)="99", 0x1}, {0x0}], 0x2, &(0x7f00000019c0)=ANY=[], 0x168}}], 0x1, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000c7000fddbdf2546ff01000000000000003d000400000008003d000000000008000300040000000800030003000000080003000000000008003d0004000000080003000100000008003d00010000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000c7000fddbdf2546ff01000000000000003d000400000008003d000000000008000300040000000800030003000000080003000000000008003d0004000000080003000100000008003d00010000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x2d}, {0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r8, {0xffffffffffffffff}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x662134670e1f0870}, 0xc, &(0x7f0000000780)={&(0x7f00000008c0)={0x14, r10, 0x400, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x662134670e1f0870}, 0xc, &(0x7f0000000780)={&(0x7f00000008c0)={0x14, r10, 0x400, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x48, &(0x7f0000000040)=ANY=[@ANYRES8=r8], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x400}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x400}, 0x50) 1.543099168s ago: executing program 2 (id=560): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) shutdown(r5, 0x1) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="610301800d02ff0352947d"], 0xb) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000001d00000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c0003"], 0x70}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4ec, &(0x7f0000000300)="$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") socket$tipc(0x1e, 0x2, 0x0) 1.163323368s ago: executing program 3 (id=566): io_uring_setup(0x497c, &(0x7f0000001440)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebca17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x40) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{}, "b579fb6acb03ed54", "911a1e5d8b918ee948ba08ac52468dd9", "0200", "375bb71e02c67767"}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4608}, 0x40) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r4 = dup(r1) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLERRORu(r6, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYBLOB="38b7de9dc3fc524b2c0b6548f5e081d24a4d8389b10c311a004e6a7e61cb7a91d97c91313ae13b813836f1e15d972abdab70be0ca190c129e060b0e5e2af0c764fc80b96ffb565d3dc2d1efa9d750979cccda8e0a77d9fb54b9023d1c8db25628c71111906e1d41c9e2af469b28fa62b6c09f23629486a8e3f383a37761ae4932d279be3e0454f17607cd844c048759e58520d5380679ed1a4731750701435bfa076a0895af2f1585b49dcdd137d5b685f79c4a838fd36bb2fe43a0b31659b6f8f4005a0805b8d6288cb92c21d6388491a10cb9296ad669848b75b", @ANYRES16=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYRESHEX=0x0], 0xfffffffffffffff4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x20ffc000) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x20, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r9, @ANYBLOB='l\x00']) 1.114235811s ago: executing program 3 (id=567): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 971.385373ms ago: executing program 0 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000002090300000000000000000700020000280002000600fc400000000006000340004cf6ca4a00018008000100ffffffff0800020000000000"], 0x3c}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x105b01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500), 0xbf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b000700000006001100040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00020000000600110000040000080001007063690011000200303030303a30303a31302e300000000008000b0058b7000006001100090a0000080001007063690011000200303030303a30303a31302e300000000008000b00040000000600110000040000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000050}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7f06) 866.307041ms ago: executing program 4 (id=571): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x90e, 0x102) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x30, 0x18, 0xe0, 0x0, 0x0, 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x0, 0x0, 0xb7400000000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xd}) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2066}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @remote, 0x5}, 0x1c) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x2b8200, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002dbd7000fedbdf259006a421e2edaca9053c04b6814fd55d1ec261403ce134f4cc0c0000000c009900000800003a0000000800090005ac0f0004000b000a00060008021100000000000800370001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/197, 0xc5}], 0x4, 0x4c, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="5ea46c4e254500000000000079104e0000000000c300000000f7193100009500000000006973727ed6af76c4a76dbbd1ca2606"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f00000015c0)=""/201}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, &(0x7f0000000200)="d5", 0x1, 0x0, &(0x7f0000000240)={0x11, 0xe}, 0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0x20, &(0x7f00000011c0)={&(0x7f0000000180)=""/4096, 0x1000, 0x0, &(0x7f0000001180)=""/8, 0x8}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x20000000000003}) 739.312691ms ago: executing program 0 (id=572): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000020000000007911a8000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, r0, 0x3, 0x0, 0xffffffffffffffff, @link_id}, 0x20) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) listxattr(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8415, 0x4, 0x9, 0xac5, 0xffffffffffffffff, 0xae1b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000005, 0xffffffff, 0x8}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$unix(0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffff5d20aaaaaaaabb080600010800060400010180c20000002000000057330377ba25ac1414ff"], 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) (rerun: 64) 739.073971ms ago: executing program 0 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000002090300000000000000000700020000280002000600fc400000000006000340004cf6ca4a00018008000100ffffffff0800020000000000"], 0x3c}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x105b01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000500), 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) sendfile(r2, r2, &(0x7f0000000240), 0x7f06) 731.003602ms ago: executing program 4 (id=574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000002090300000000000000000700020000280002000600fc400000000006000340004cf6ca4a00018008000100ffffffff0800020000000000"], 0x3c}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x105b01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500), 0xbf) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b000700000006001100040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00020000000600110000040000080001007063690011000200303030303a30303a31302e300000000008000b0058b7000006001100090a0000080001007063690011000200303030303a30303a31302e300000000008000b00040000000600110000040000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000050}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) sendfile(r1, r1, &(0x7f0000000240), 0x7f06) 727.771502ms ago: executing program 3 (id=576): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r4], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x8}], 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1400000010000100007ccaa32c000000000000000000000a20000000000a01080000000000000000010000000900010073797a30200000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000050000000060a010400000000000000000100000008000b6d3300000028000480240001800b0001006f626a7265660008020340000000000900010073797a30000000001400000011000100000000436d5f60000000000ae8cd1f7e3e82d2f16ec1d091edc0f8556f0000"], 0xc4}}, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xe8, 0xe8, 0x1f0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@arp={@dev, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'vlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x12c0, 0x2c, 0x310, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3}, {0xffe0, 0xfff2}, {0x7, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xae6d}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff6}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0x9c0, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x101, 0x0, 0x3, 0x6, 0x7f, 0x7, 0xa5d, 0x7fff, 0x2, 0x0, 0x2, 0xcb, 0x2, 0x49ea483a, 0x7, 0x2, 0x15, 0x200, 0x6, 0x2eb11492, 0x3, 0x6, 0xd11, 0x2, 0x4, 0x6, 0x3, 0x4, 0x1, 0x1, 0xfffffc00, 0x1, 0x200, 0x80000000, 0x8e12, 0x300, 0xd, 0x7fffffff, 0x5, 0x7fffffff, 0x6, 0x1, 0x4, 0x8, 0x9, 0xf9, 0x9, 0x0, 0x5, 0x0, 0x2, 0xb, 0x6, 0x1, 0x10001, 0xf, 0x400, 0xad5, 0x6, 0xe, 0x46, 0x200, 0x7, 0x100, 0x1, 0x9, 0x9c04, 0x401, 0x8, 0x9, 0x8, 0x3, 0x9, 0x1, 0x4, 0x0, 0xfff, 0x8001, 0x1, 0x4, 0x100, 0x100, 0x6, 0x0, 0x7, 0xfffffff8, 0x8, 0x5, 0x7, 0x200, 0x5, 0xfffffffa, 0x8ce, 0xfffffff7, 0xe9d, 0x80000000, 0xaf1b, 0x7, 0x638, 0xfffffc00, 0x9, 0x0, 0x6, 0xa, 0x2, 0xa, 0x200, 0x1, 0xfffffff3, 0x3, 0x400, 0x4, 0xf, 0x5, 0x6, 0xeac, 0x3, 0x5, 0x8001, 0x7, 0xfffffe01, 0x401, 0xfffffffb, 0x9, 0x8, 0x5, 0x333dd391, 0xfff, 0x7, 0xfffffff7, 0x7f8f, 0x1, 0x5, 0x6, 0x2, 0x1, 0x0, 0x7fffffff, 0x3, 0x6, 0x1db, 0x3, 0xfffffff1, 0x6, 0xff, 0x8, 0x10000, 0xe9, 0x795, 0x5, 0x2, 0x100, 0x4, 0x2, 0x81, 0x302, 0x3, 0x200, 0xa, 0xf, 0xff, 0xff, 0x100, 0x5, 0xffffffff, 0x8, 0x58e, 0x1ff, 0x8, 0x10000, 0x8, 0x5fe09c4c, 0x6, 0x4, 0x9, 0x8d, 0x3, 0x9290, 0x9, 0x5, 0x2, 0x6, 0x401, 0x70, 0xffff, 0x2, 0x8, 0x1, 0xfff, 0x9, 0x57f1, 0x5, 0xff, 0xd4, 0x5, 0x1, 0x0, 0x9, 0x3, 0x3f4, 0x8, 0x5, 0x9, 0x6, 0x8, 0x6e0, 0x7, 0x1, 0x400, 0xa, 0x9, 0x3, 0x2, 0x7313843, 0x2, 0x5f, 0xffffffff, 0x2cc, 0x3, 0x7, 0x7, 0x2, 0x2, 0x8d8, 0x1, 0x4, 0x2, 0x6, 0x8, 0xd21, 0x27, 0x80000001, 0xa, 0xffff, 0xf73, 0x3, 0xdc, 0xd06, 0x1, 0xe7b1, 0x8, 0x673, 0x4, 0x7, 0x5, 0xffffffff, 0x8, 0x401, 0xfff, 0x1ff, 0x25, 0x3, 0x363d, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0x0, 0x4, 0x9, 0x3, 0x7, 0x8, 0x400, 0x7, 0x1, 0xa, 0x7, 0x7fff, 0x6, 0x71, 0x9, 0x400, 0x7, 0x7, 0x7, 0x9, 0x7998, 0x0, 0xab1, 0x1, 0x3, 0x6b3eb683, 0xf550, 0xffff, 0x8000, 0x1, 0x3, 0x7, 0xcc07, 0x9e6, 0x5, 0x6, 0x200, 0x6, 0x2, 0x7, 0x1000, 0xe, 0x6, 0x101, 0x5, 0x7, 0x3, 0xea, 0x9, 0x66e18cb3, 0x7, 0x4, 0x5, 0xff, 0x0, 0x68, 0x8000, 0x80, 0x38000, 0x6, 0x7, 0xb52b, 0x3, 0x4, 0x8, 0x9, 0x8000, 0x0, 0x2, 0x8b4, 0x5, 0x2, 0x400, 0xf, 0x8, 0x1, 0x5, 0x10000, 0x5, 0xff, 0x1, 0x0, 0x400, 0x7, 0x4, 0x7f, 0xffff, 0xffffffff, 0x400, 0x0, 0x0, 0x1, 0x4f1273fe, 0x1, 0x20a, 0x5, 0x9, 0x2, 0x101, 0x10000, 0x2, 0x2, 0x8, 0x401, 0x5, 0xffffb28c, 0x8, 0x3, 0x9, 0x7, 0x5, 0x2, 0xf0a6, 0x6, 0x2, 0x400, 0x8, 0xc, 0x0, 0x1, 0x4, 0x2, 0x2, 0x4, 0x4, 0x800, 0x4, 0x7ff, 0x400, 0x2, 0x9, 0x4, 0x2, 0x9, 0x0, 0x7, 0x84d, 0x1, 0x4, 0x8, 0xc, 0x10, 0x2, 0xa19, 0x2, 0x800, 0x10000, 0x2, 0x9, 0x0, 0xfffffffb, 0x497, 0x8, 0xf8, 0xf, 0x4, 0x0, 0x1, 0x9, 0x8, 0x6, 0x0, 0x9, 0xffbc, 0x6, 0x101, 0x3, 0x2, 0x2, 0xa, 0x6, 0x7fffffff, 0x9, 0x5, 0x89, 0x5, 0x89, 0x0, 0xa59, 0x6, 0xa61, 0x3ff, 0x3, 0x8, 0x4a6, 0x1, 0x6e, 0x1, 0xe58, 0x5, 0x9, 0x200, 0x3, 0xe, 0xfff, 0x0, 0xffff, 0x7000, 0x100, 0x3, 0x3, 0xfffffffe, 0x4, 0x1, 0x546, 0x80000000, 0x7fffffff, 0x40, 0x9dd, 0x46, 0x9, 0x7fff, 0x9, 0x4, 0x7, 0x4, 0x9c2, 0x2, 0x80000000, 0xd2a1fef, 0xf75, 0x8, 0x5, 0xe5b, 0xac, 0x1, 0xff, 0x7, 0x0, 0x81, 0x5f, 0x401, 0x9, 0x53, 0xfff, 0x0, 0x8, 0x200, 0xffff5f7b, 0xffff, 0x5, 0x2, 0xfff, 0x1bb, 0x7, 0x51fa, 0xff, 0xb, 0x80, 0x1ff, 0x9, 0x7, 0x68a4, 0x3]}]}, @TCA_CGROUP_ACT={0x1b0, 0x1, [@m_csum={0xf8, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x2, 0x2, 0x4, 0xfff}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x875, 0x9, 0x7, 0x4, 0x200}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x10000000, 0x9, 0x7ff}, 0x58}}]}, {0x78, 0x6, "070574c15cd068b47bdd302346e91b6ff468a35bc2777d12fcee26d2322591063590814d0b8172196568d25f3bbb3e68a282ff219d6a5501d90fcac2f9c080b2b62758aa620f0fbf8ea475a0c1cab49c7ed0014a84acd95cbd5c7c81b44ef33ad44e809ae0535f7686a6f922e00c3d62244b3749"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xb4, 0x18, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0x6, 0x7, 0x80000000, 0x5}}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4d, 0x6, "f8fef9156748761c611ab8244c3017fea583fbae6a3a5029eb980a91128481a5f93af474769704abf9c748295f7c347a862c4a121e5da643c3201d4c143672bc6a7ffe79791eda6d67"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x850, 0x2, [@TCA_ROUTE4_POLICE={0x844, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xc, 0xfffffffe, 0x7, 0x1, 0xcc, 0x479, 0x3, 0xf, 0x188, 0x6, 0x5a9, 0x9, 0x9, 0x8, 0x70, 0x2, 0x10001, 0x10, 0x800, 0xe0, 0xc4b5, 0x7, 0x80, 0x8, 0x1, 0x1ff, 0x5, 0x5, 0xffff, 0x73, 0x5, 0x47, 0xb97, 0x5285, 0x800, 0x9, 0x3, 0x3ff, 0x2, 0x6, 0x24, 0x8, 0x4, 0x4, 0xffffffff, 0x7, 0xc7, 0x7323, 0xfffffffa, 0x5, 0x8001, 0x493, 0x1, 0x2de8b72, 0xfffffffb, 0x4, 0x6, 0xffff, 0x7, 0x95, 0x2, 0xffff, 0x4, 0x8, 0x9, 0xb, 0x7, 0x7d9, 0x2, 0x2, 0x0, 0x4, 0x6f17, 0x2, 0x3, 0x80, 0xb, 0x8, 0xe3, 0x444a, 0x4, 0x2, 0x81, 0x80, 0x7787, 0x4, 0x1, 0x101, 0xffffffe1, 0x9, 0x2, 0x1, 0x2, 0x3, 0x800, 0x3, 0x1ff, 0x3, 0x4, 0x4, 0x3, 0x8, 0xf7b4, 0x7, 0x8, 0x2, 0x10, 0x8, 0xfffff000, 0x6, 0x3ff, 0xfffffe01, 0x9, 0x9, 0x4, 0x732, 0x800, 0xd, 0xc, 0x2, 0xfffffff8, 0x1, 0x5, 0x2e5e, 0x9, 0xa, 0x2, 0x0, 0x8, 0x81, 0x2, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1, 0x2, 0x8, 0x2, 0xba12, 0xdf5, 0x5, 0x93, 0x8, 0x9, 0x8, 0x5, 0x8, 0xffffffff, 0x0, 0xb041, 0x0, 0x4, 0x0, 0xffffff01, 0xb, 0x27cf, 0x3, 0x4, 0x101, 0x2, 0x5, 0x5, 0xa8, 0xd, 0x7, 0x19, 0x7, 0x1, 0x0, 0x3, 0x10001, 0xffffffff, 0xa4d, 0x4, 0xffffff97, 0x8, 0x8000, 0x5, 0x6, 0xfffffff9, 0x4, 0x10, 0xd19, 0x6b, 0x7fffffff, 0x3, 0x0, 0x0, 0x93b, 0x82, 0x7fffffff, 0x9, 0x9, 0xc54, 0x7, 0x4, 0x6, 0x1, 0x7, 0x8, 0x10, 0x0, 0x0, 0x1ff, 0x9759, 0x4, 0x9, 0x2, 0xed, 0x0, 0x0, 0x0, 0xb, 0x7fffffff, 0xfff, 0x2, 0x9, 0x1, 0xfff, 0x4, 0x8, 0x5, 0x0, 0x7ff, 0xffffff3a, 0x5, 0x0, 0x5, 0x100, 0x8, 0x1, 0x8, 0x2, 0x4, 0x3, 0xf46, 0x6, 0xfffffffd, 0xfffffffb, 0x26d6c910, 0x2, 0x7, 0x8, 0x3, 0x5, 0x7, 0x32253b1d, 0x3, 0x107, 0x5, 0xae0b, 0x100, 0xfb1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x82}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x80, 0x40, 0xd9b, 0x1, 0x7fff, 0x3, 0x1b2, 0x5, 0x3, 0x2, 0x661bb9b, 0x7, 0x4, 0x6, 0x8, 0x8, 0x0, 0xbcc, 0x3, 0xe, 0x2, 0x87, 0x1, 0x7fffffff, 0xe6, 0x8, 0x2, 0x860a, 0x5, 0x7, 0x4, 0x4, 0x7, 0x8, 0x1, 0x5, 0x2, 0x7, 0xd, 0x6, 0x4ba, 0x3, 0xf, 0x2b, 0xc68e, 0x3163f234, 0x7, 0x806b, 0x7, 0x10, 0x6, 0x4, 0xbb, 0x0, 0x3a, 0x3, 0x4, 0x7, 0x1, 0xcdf, 0x90b, 0x3, 0x1, 0x2, 0x2, 0x379c, 0x71, 0x5, 0x7, 0xe2e, 0xe49, 0x5, 0x3, 0x7ff, 0x8, 0x8, 0x8fb1, 0x9, 0x100, 0x2, 0x2, 0x7, 0x98, 0x0, 0x3, 0x8, 0x2d860bd9, 0xfff, 0x6, 0x588ce4a, 0x6, 0x9, 0xfffff801, 0xfffffff9, 0x4, 0x6, 0x8001, 0x8, 0xf, 0x401, 0x10000, 0x8000, 0x0, 0x81, 0x2, 0x8, 0x4, 0x2, 0x8000, 0x7, 0x4000000, 0x6, 0x1ff, 0x0, 0x1, 0x10001, 0xa0, 0x8, 0x9, 0x9, 0x2, 0x10, 0x2, 0x1, 0x3ff, 0x6d953e13, 0x9, 0x100, 0x5, 0xfffffffe, 0x0, 0x5, 0x6, 0x1, 0x0, 0x5, 0x8, 0x2, 0x4, 0x40, 0x4, 0x8, 0x80, 0x73, 0xfff, 0x101, 0x5, 0x2, 0x4, 0xe, 0x71, 0x6, 0x7ff, 0x400, 0x3, 0x7000000, 0xd, 0x80000001, 0x1, 0x1, 0x0, 0x400, 0x200, 0x3ff, 0x1, 0xfffffffb, 0x2, 0x10, 0x45cdf753, 0x8, 0x3, 0xbe3e, 0x401, 0xb4, 0xc, 0x7, 0xf, 0x0, 0x0, 0x9, 0x6d0, 0xe8, 0x1, 0x29f1, 0x697, 0x4d, 0x9, 0x10000, 0x80000001, 0x0, 0x8, 0x1, 0x800, 0x2, 0x3, 0x4, 0xb, 0xffff, 0x5, 0x800, 0x731, 0x4, 0x8, 0x4, 0xffff, 0x8, 0x4, 0xbd9, 0x63c1, 0xf35, 0xef2, 0x0, 0x6, 0x2, 0xb41d, 0x4, 0x400, 0x3, 0x80000, 0x87, 0xc8, 0x800, 0xa7ba, 0x4, 0xfffffff0, 0x3, 0x40, 0x0, 0x1, 0x4, 0xde, 0x7, 0x3, 0x5, 0x8, 0x2402, 0x10001, 0x1000000, 0x5, 0x1, 0x5, 0x3, 0x0, 0x80, 0x3, 0x8, 0x1, 0x0, 0x6, 0x8000, 0x1, 0x3, 0x8, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x13}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa10b}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x54}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}]}}]}, 0x12c0}}, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) 689.953805ms ago: executing program 2 (id=577): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000013d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b5000000087c950095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r3, 0x25, 0x0, @void}, 0x10) 658.513858ms ago: executing program 2 (id=579): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000009c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4c6, &(0x7f0000000100)="$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") r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) epoll_pwait(r2, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010200d50d37a700000011000000080001"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) creat(&(0x7f0000000e00)='./file0\x00', 0x0) mknod$loop(0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) 647.394728ms ago: executing program 1 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00'}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500), 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x0, 0x0, &(0x7f00000002c0)="1a000000", 0x4) sendfile(r1, r1, &(0x7f0000000240), 0x0) 292.531696ms ago: executing program 0 (id=581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000002090300000000000000000700020000280002000600fc400000000006000340004cf6ca4a00018008000100ffffffff0800020000000000"], 0x3c}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x105b01) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2dc5c07001a000100000000897b2a1d84f5c7ffff00000000000067e77dc70b90bbb45efd97899a16f2df4fa2a8f069d9b047389f672eb3080000000000000065890d2d0d1b8d3d62f6d77b0283e166e2ca4c35483d3f00d6bf7da9299e6e81c96daf520300a16cab12d75a852b3e4470420877efbe1f000000000000007e15f9b683e63cfff7c638bca835b33bc18c4ed0351cd285197b0241569048b5b416ba1c57217be5a338392f831637ee8c25bb2183634a33b18c4b459f9aea5ab222d7060000000000665106000000a803d1b56126efec0225a5433883b0d17cb21dbfd886caf2624e7f00da0ef9893ef57c79a182dceca9c46a9f8b001e53b29c0c698ed30d8942e94ac057bde74e42021d895c22b6400000002b2c604ed73249e80f08bfdcebee7a07856a3a23e0907f3dc0eb52c40f6b21c14832dd9845ee8d8733b52c8422295fde5626cd43fb43fb3acf9b2e840713cba86d43a570ee3589b7e9000000000000000000000000000000dc85131317c56465978d957d000000000000000000000000000000000000000000000000000000000000000000301171e8e3a2d0c842c20fd293c073b93f7662fad1f4ae3e1fe359aa29a4b8965229fa06b0fb2e23d2644cfbdbd6929aa42151ea48334743ad0c378641e74d55d6cd7b098599190100000055ec9c0c26b71588d6fc97e3098fb0e778be446659cf665e7f848d85de70c3c426a539a9a0e92e7bbf77528053dcb3b791b8e3faae507a3b721b670b06b78bb09e82ecc85a4bbc596d8ce02a2cbede5573f8bdc84d61c5634fffa50e74ec0f2da4f3d82c2d2b5a20ec152df14481c3bb59a23e014d07fc070d87f58118f468bf80283e0ce7efda7906f9c53319aef22e01a9ba5649fc10fb5b8132dcf42c47a4b79efb9f720ebd2dcc1634f870cee6201bc0ad9e17c4633a17de505bed8fded3053cb455636132bdae3239b9c8b437256ac21a49c4f03b268c47e9becbaff440728429f9e0b0222485188b745b3c871d01d27eb4e5e00bcd79b95601098e044345a8aaa12fda56277aef89192b9af038ab8808a2adf0c3a15ec863e5f352c7967607cede40848eae2704701b7af0a0b30e9e5b76f45500000000000000", @ANYRESDEC=0x0], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500), 0xbf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) sendfile(r1, r1, &(0x7f0000000240), 0x7f06) 243.397341ms ago: executing program 4 (id=582): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 188.594885ms ago: executing program 4 (id=583): setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "4ba80731a9c4e55b", "b8b4ce809331d7581f2e98de88042796", "1fed6347", "8b69628e20d9b2e4"}, 0x28) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x40000) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0x2, 0x800, 0xf, 0x4, 0x10a, 0x1}) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000000c0)) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000100)=""/68) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="e1b5013e6e83894cbdfe8ce06369cc6754ddc0154bf12bbcaadacb9ea6c0e6008b7741b0c408c00b535986e5c8b25a8f6d660fbecdad05bc6aa5db7d60a63a65b5e0ad3b7fdb7fd9e27f9e345b7734c2db5c4e41d528c4ee0b56794f4feeaf4e6900c3eaeca499aa77a4930ae549f1037a35f37673f519af53ad87849a437cd3efb8fb1cb910a332795569b6fcc66c185f331aa090bb783e9c27807cc9227e22ffc08f33e7994fcbb42a2afa4efcce55c4c8b5cd7604720df5d1c5c90feda563945524b79c167bce9e0b1190bb4fef9c723177a5c9e2efaecd5b71bad139a49680808dc2ddce8211deb7f56ce3d77d3147", 0xf1}, {&(0x7f0000000280)="0c4e151329e6c9aee42a319c798b0695fe239daf23529160650da97cf67340f50b009f1daf14e90c2a4b0488", 0x2c}, {&(0x7f00000002c0)="7a3be4d6dc9843839548aff44edc975c0ca5642cf253ddef2807989e4ebf06ade09c9e3e3a05fad09b7e253b0bb6eed1121615e7757bf2e3ecd87d6e40061fd6c71bc74dcdfa1906e0a88a42ee4c74351df8e258e7291e725076bb53d1673e5d0ee41d6b8ff75cda141df0e98b53429f667ad2fd", 0x74}], 0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDADDIO(r1, 0x4b34, 0x8000000000000000) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x400400, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='lp\x00', 0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0xffff, 0xfffffff9, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast2, @private=0xa010102, {[@generic={0x7, 0x8, "a18e8ace668d"}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv6_getnexthop={0x3c, 0x6a, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10001}, 0xd4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x80010, r1, 0xab5ff000) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x5, 0x4) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000740)=""/189) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x4000000) (async) r9 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000000940)={0x1, 'pim6reg0\x00', {}, 0x6274}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000009c0)=0x800) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc8, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5}}]}, 0xc8}}, 0x40) (async) getsockname$l2tp6(r2, &(0x7f0000000c00)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000c40)=0x20) (async) wait4(0x0, &(0x7f0000000cc0), 0x1, &(0x7f0000000d00)) 153.014848ms ago: executing program 1 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x0, 0x4, 0x5, 0xffffffffffffffff, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'pimreg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000001e00000000002000000018000000370000240000000047bfb6032f47030010004e00b4dd020000001835000001000000000000000000000095000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000940)=[{0x0, 0x3, 0xd, 0xb}], 0x10, 0x9}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="8de7f923948a1b8769cae8aabd0f1dd477", 0x11}, {&(0x7f0000000180)="02", 0x1}, {0x0}], 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r8 = dup(r7) pwritev2(r8, &(0x7f0000000500)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0xd8c1, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000080)={0x0, r5, 0x0, 0x2000000}) 117.068281ms ago: executing program 1 (id=585): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) shutdown(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 116.696031ms ago: executing program 4 (id=586): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 115.611911ms ago: executing program 4 (id=587): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) shutdown(r5, 0x1) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) write$nci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="610301800d02ff0352947d"], 0xb) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000001d00000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c0003"], 0x70}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4ec, &(0x7f0000000300)="$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") socket$tipc(0x1e, 0x2, 0x0) 105.372982ms ago: executing program 1 (id=588): socket$kcm(0x21, 0x0, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, &(0x7f0000000040)) r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000002c0)=0x3) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x3f, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x3304, 0x0) 17.549369ms ago: executing program 1 (id=589): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc02081, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x2, 0x5, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x305) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc54e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000140)={0x3, 0x0, 0x20, 0x0, 0xd2, &(0x7f0000001000)}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) 0s ago: executing program 1 (id=590): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000013d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b5000000087c950095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r2, 0x25, 0x0, @void}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r4, 0x25, 0x0, @void}, 0x10) kernel console output (not intermixed with test programs): mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.047567][ T3070] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.032133][ T3082] chnl_net:caif_netlink_parms(): no params data found [ 23.102973][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.110089][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.117446][ T3082] bridge_slave_0: entered allmulticast mode [ 23.123707][ T3082] bridge_slave_0: entered promiscuous mode [ 23.131890][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.139155][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.146379][ T3082] bridge_slave_1: entered allmulticast mode [ 23.152677][ T3082] bridge_slave_1: entered promiscuous mode [ 23.168853][ T3091] chnl_net:caif_netlink_parms(): no params data found [ 23.191156][ T3082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.201256][ T3082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.215927][ T3085] chnl_net:caif_netlink_parms(): no params data found [ 23.272861][ T3082] team0: Port device team_slave_0 added [ 23.280808][ T3083] chnl_net:caif_netlink_parms(): no params data found [ 23.296810][ T3082] team0: Port device team_slave_1 added [ 23.337408][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.344536][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.351884][ T3091] bridge_slave_0: entered allmulticast mode [ 23.358418][ T3091] bridge_slave_0: entered promiscuous mode [ 23.364916][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.371979][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.379165][ T3091] bridge_slave_1: entered allmulticast mode [ 23.385542][ T3091] bridge_slave_1: entered promiscuous mode [ 23.398164][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.405151][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.431082][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.441821][ T3087] chnl_net:caif_netlink_parms(): no params data found [ 23.459444][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.467121][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.474300][ T3085] bridge_slave_0: entered allmulticast mode [ 23.480664][ T3085] bridge_slave_0: entered promiscuous mode [ 23.487224][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.494154][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.520152][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.543576][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.550740][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.558020][ T3085] bridge_slave_1: entered allmulticast mode [ 23.564238][ T3085] bridge_slave_1: entered promiscuous mode [ 23.580256][ T3091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.600895][ T3091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.619380][ T3083] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.626574][ T3083] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.633674][ T3083] bridge_slave_0: entered allmulticast mode [ 23.640228][ T3083] bridge_slave_0: entered promiscuous mode [ 23.647591][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.672100][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.679192][ T3083] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.686314][ T3083] bridge_slave_1: entered allmulticast mode [ 23.692781][ T3083] bridge_slave_1: entered promiscuous mode [ 23.704116][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.717709][ T3091] team0: Port device team_slave_0 added [ 23.725224][ T3082] hsr_slave_0: entered promiscuous mode [ 23.731540][ T3082] hsr_slave_1: entered promiscuous mode [ 23.754706][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.761986][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.769296][ T3087] bridge_slave_0: entered allmulticast mode [ 23.775761][ T3087] bridge_slave_0: entered promiscuous mode [ 23.782760][ T3091] team0: Port device team_slave_1 added [ 23.793848][ T3083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.807612][ T3085] team0: Port device team_slave_0 added [ 23.813505][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.820552][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.846572][ T3091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.857332][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.864387][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.871560][ T3087] bridge_slave_1: entered allmulticast mode [ 23.878097][ T3087] bridge_slave_1: entered promiscuous mode [ 23.889692][ T3083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.899382][ T3085] team0: Port device team_slave_1 added [ 23.905452][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.912415][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.938297][ T3091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.957656][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.989313][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.996399][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.022367][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.033824][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.048236][ T3083] team0: Port device team_slave_0 added [ 24.054898][ T3083] team0: Port device team_slave_1 added [ 24.060976][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.067918][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.093915][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.111852][ T3087] team0: Port device team_slave_0 added [ 24.147517][ T3087] team0: Port device team_slave_1 added [ 24.177173][ T3083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.184182][ T3083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.210165][ T3083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.223196][ T3091] hsr_slave_0: entered promiscuous mode [ 24.229254][ T3091] hsr_slave_1: entered promiscuous mode [ 24.235089][ T3091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.242740][ T3091] Cannot create hsr debugfs directory [ 24.252271][ T3085] hsr_slave_0: entered promiscuous mode [ 24.258273][ T3085] hsr_slave_1: entered promiscuous mode [ 24.264296][ T3085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.271880][ T3085] Cannot create hsr debugfs directory [ 24.277645][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.284585][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.310569][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.321577][ T3083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.328552][ T3083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.354550][ T3083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.379425][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.386563][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.412668][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.473193][ T3087] hsr_slave_0: entered promiscuous mode [ 24.479345][ T3087] hsr_slave_1: entered promiscuous mode [ 24.485086][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.492676][ T3087] Cannot create hsr debugfs directory [ 24.504140][ T3083] hsr_slave_0: entered promiscuous mode [ 24.510186][ T3083] hsr_slave_1: entered promiscuous mode [ 24.515925][ T3083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.523600][ T3083] Cannot create hsr debugfs directory [ 24.577201][ T3082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.598873][ T3082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.630158][ T3082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.640740][ T3082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.687103][ T3085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.695621][ T3085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.704158][ T3085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.715476][ T3085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.754452][ T3091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.763172][ T3091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.773594][ T3091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.784241][ T3091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.812459][ T3087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.822349][ T3087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.830909][ T3087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.839422][ T3087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.886710][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.897781][ T3083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.908426][ T3083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.917844][ T3083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.928547][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.940502][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.947694][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.955342][ T3083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.970752][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.979936][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.987272][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.002793][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.034086][ T3091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.047141][ T3091] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.069210][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.076281][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.084740][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.091793][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.102001][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.109055][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.135545][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.155589][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.169103][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.176258][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.204530][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.211687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.226006][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.233142][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.243445][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.260329][ T3091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.270978][ T3091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.325652][ T3083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.341373][ T3083] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.358288][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.365374][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.381155][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.388283][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.406850][ T3091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.420353][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.458030][ T3083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.482715][ T3082] veth0_vlan: entered promiscuous mode [ 25.497382][ T3082] veth1_vlan: entered promiscuous mode [ 25.510469][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.524543][ T3082] veth0_macvtap: entered promiscuous mode [ 25.544346][ T3082] veth1_macvtap: entered promiscuous mode [ 25.565979][ T3091] veth0_vlan: entered promiscuous mode [ 25.579547][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.604653][ T3085] veth0_vlan: entered promiscuous mode [ 25.614109][ T3091] veth1_vlan: entered promiscuous mode [ 25.623109][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.632504][ T3083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.644473][ T3082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.653422][ T3082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.662136][ T3082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.670863][ T3082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.681233][ T3085] veth1_vlan: entered promiscuous mode [ 25.698172][ T3085] veth0_macvtap: entered promiscuous mode [ 25.705389][ T3085] veth1_macvtap: entered promiscuous mode [ 25.724074][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.734552][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.745930][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.764099][ T3091] veth0_macvtap: entered promiscuous mode [ 25.787654][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.798219][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.809729][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.823094][ T3091] veth1_macvtap: entered promiscuous mode [ 25.835805][ T3085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.844671][ T3085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.853478][ T3085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.862252][ T3085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.906360][ T3083] veth0_vlan: entered promiscuous mode [ 25.917866][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.928471][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.938370][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.948857][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.959417][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.977411][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.988149][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.998062][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.008530][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.019525][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.034601][ T3091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.043493][ T3091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.052226][ T3091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.060999][ T3091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.073026][ T3087] veth0_vlan: entered promiscuous mode [ 26.084088][ T3083] veth1_vlan: entered promiscuous mode [ 26.092419][ T3087] veth1_vlan: entered promiscuous mode [ 26.124523][ T3087] veth0_macvtap: entered promiscuous mode [ 26.131054][ T1609] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 26.141430][ T3087] veth1_macvtap: entered promiscuous mode [ 26.147578][ T3239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 26.154024][ T3083] veth0_macvtap: entered promiscuous mode [ 26.162144][ T3238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 26.165644][ T3241] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.175259][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.189652][ T3239] loop2: detected capacity change from 0 to 512 [ 26.193126][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.209172][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.214296][ T3242] loop1: detected capacity change from 0 to 512 [ 26.219667][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.219682][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.246183][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.258338][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.270887][ T3241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 26.280634][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.291159][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.301110][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.311547][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.321367][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.331874][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.337088][ T3242] EXT4-fs (loop1): too many log groups per flexible block group [ 26.344251][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.349432][ T3242] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 26.358143][ T3083] veth1_macvtap: entered promiscuous mode [ 26.369628][ T3242] EXT4-fs (loop1): mount failed [ 26.370586][ T3239] EXT4-fs (loop2): too many log groups per flexible block group [ 26.382198][ T3239] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 26.389072][ T3239] EXT4-fs (loop2): mount failed [ 26.391468][ T3087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.402775][ T3087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.411518][ T3087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.420290][ T3087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.446039][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.447637][ T3241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 26.456717][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.463152][ T3241] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 26.473143][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.480672][ T3241] vhci_hcd vhci_hcd.0: Device attached [ 26.491014][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.491023][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.491034][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.491044][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.491054][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.495716][ T3083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.560057][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.570580][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.580436][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.590926][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.600741][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.611204][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.621223][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.631652][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.642712][ T3083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.651719][ T3083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.660478][ T3083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.669179][ T3083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.677865][ T3083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.716288][ T3161] vhci_hcd: vhci_device speed not set [ 26.785061][ T3254] loop4: detected capacity change from 0 to 8192 [ 26.791657][ T3254] ======================================================= [ 26.791657][ T3254] WARNING: The mand mount option has been deprecated and [ 26.791657][ T3254] and is ignored by this kernel. Remove the mand [ 26.791657][ T3254] option from the mount to silence this warning. [ 26.791657][ T3254] ======================================================= [ 26.843619][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 26.843634][ T29] audit: type=1400 audit(1721315255.774:141): avc: denied { mount } for pid=3253 comm="syz.4.5" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.887558][ T3161] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 26.903327][ T29] audit: type=1400 audit(1721315255.784:142): avc: denied { create } for pid=3253 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.922638][ T29] audit: type=1400 audit(1721315255.784:143): avc: denied { setopt } for pid=3253 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.941977][ T29] audit: type=1400 audit(1721315255.814:144): avc: denied { read } for pid=3260 comm="syz.2.8" dev="nsfs" ino=4026532554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.962998][ T29] audit: type=1400 audit(1721315255.824:145): avc: denied { open } for pid=3260 comm="syz.2.8" path="net:[4026532554]" dev="nsfs" ino=4026532554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.982056][ T3267] loop1: detected capacity change from 0 to 8192 [ 26.986076][ T29] audit: type=1400 audit(1721315255.834:146): avc: denied { create } for pid=3258 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.011597][ T29] audit: type=1400 audit(1721315255.834:147): avc: denied { write } for pid=3260 comm="syz.2.8" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.042442][ T29] audit: type=1400 audit(1721315255.974:148): avc: denied { unmount } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.046859][ T3261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 27.082870][ T3261] loop2: detected capacity change from 0 to 512 [ 27.084191][ T3248] vhci_hcd: connection reset by peer [ 27.104829][ T11] vhci_hcd: stop threads [ 27.109150][ T11] vhci_hcd: release socket [ 27.113608][ T11] vhci_hcd: disconnect device [ 27.137955][ T3261] EXT4-fs (loop2): too many log groups per flexible block group [ 27.145708][ T3261] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 27.153881][ T3261] EXT4-fs (loop2): mount failed [ 27.181633][ T3277] loop0: detected capacity change from 0 to 164 [ 27.189324][ T3277] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 27.204320][ T29] audit: type=1400 audit(1721315256.134:149): avc: denied { mount } for pid=3274 comm="syz.0.11" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 27.205647][ T3277] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 27.240658][ T3277] process 'syz.0.11' launched '/dev/fd/5/./file0' with NULL argv: empty string added [ 27.261467][ T29] audit: type=1400 audit(1721315256.194:150): avc: denied { unmount } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 27.367978][ T3282] loop2: detected capacity change from 0 to 8192 [ 27.470654][ T3293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 27.533270][ T3293] loop1: detected capacity change from 0 to 8192 [ 27.821499][ T3312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21'. [ 27.844251][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 27.850928][ T3314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 27.853580][ T3313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 27.883043][ T3313] loop3: detected capacity change from 0 to 512 [ 27.884992][ T3314] loop2: detected capacity change from 0 to 512 [ 27.897274][ T3312] loop1: detected capacity change from 0 to 8192 [ 27.908265][ T3313] EXT4-fs (loop3): too many log groups per flexible block group [ 27.915969][ T3313] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 27.925607][ T3313] EXT4-fs (loop3): mount failed [ 27.927435][ T3314] EXT4-fs (loop2): too many log groups per flexible block group [ 27.938182][ T3314] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 27.949614][ T3314] EXT4-fs (loop2): mount failed [ 28.046076][ T3321] loop4: detected capacity change from 0 to 8192 [ 28.157669][ T3326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25'. [ 28.199532][ T3326] loop1: detected capacity change from 0 to 8192 [ 28.270299][ T3334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 28.323456][ T3334] loop0: detected capacity change from 0 to 8192 [ 28.507969][ T3338] loop1: detected capacity change from 0 to 8192 [ 28.742499][ T3343] loop2: detected capacity change from 0 to 8192 [ 28.759928][ T3347] loop3: detected capacity change from 0 to 8192 [ 28.809016][ T3351] loop4: detected capacity change from 0 to 8192 [ 28.965540][ T3355] loop1: detected capacity change from 0 to 8192 [ 29.132659][ T3362] loop2: detected capacity change from 0 to 8192 [ 29.204770][ T3370] loop3: detected capacity change from 0 to 8192 [ 29.442369][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 29.468714][ T3382] loop4: detected capacity change from 0 to 512 [ 29.494281][ T3382] EXT4-fs (loop4): too many log groups per flexible block group [ 29.502011][ T3382] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 29.519457][ T3382] EXT4-fs (loop4): mount failed [ 29.564350][ T3386] loop1: detected capacity change from 0 to 8192 [ 29.698895][ T3369] syz.3.40 (3369) used greatest stack depth: 11368 bytes left [ 29.701167][ T3394] loop2: detected capacity change from 0 to 8192 [ 29.805450][ T3397] loop3: detected capacity change from 0 to 8192 [ 29.963120][ T3401] loop1: detected capacity change from 0 to 8192 [ 30.031748][ T3406] loop3: detected capacity change from 0 to 8192 [ 30.049706][ T3404] loop2: detected capacity change from 0 to 8192 [ 30.347294][ T3413] loop4: detected capacity change from 0 to 8192 [ 30.566803][ T3425] loop2: detected capacity change from 0 to 8192 [ 30.594223][ T3429] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 30.600754][ T3429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 30.608466][ T3429] vhci_hcd vhci_hcd.0: Device attached [ 30.742705][ T3434] loop4: detected capacity change from 0 to 512 [ 30.756005][ T3434] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.60: bg 0: block 5: invalid block bitmap [ 30.769129][ T3434] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 30.778232][ T3434] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.60: invalid indirect mapped block 3 (level 2) [ 30.791567][ T3434] EXT4-fs (loop4): 1 orphan inode deleted [ 30.797649][ T3434] EXT4-fs (loop4): 1 truncate cleaned up [ 30.804350][ T3434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.816971][ T24] vhci_hcd: vhci_device speed not set [ 30.871557][ T3438] loop2: detected capacity change from 0 to 8192 [ 30.887720][ T24] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 31.125334][ T3430] vhci_hcd: connection reset by peer [ 31.131963][ T40] vhci_hcd: stop threads [ 31.136287][ T40] vhci_hcd: release socket [ 31.140768][ T40] vhci_hcd: disconnect device [ 31.233572][ T3449] loop2: detected capacity change from 0 to 8192 [ 31.277648][ T3452] __nla_validate_parse: 9 callbacks suppressed [ 31.277664][ T3452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.66'. [ 31.292788][ T3452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 31.320835][ T3457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'. [ 31.372787][ T3457] loop1: detected capacity change from 0 to 8192 [ 31.571530][ T3434] syz.4.60 (3434) used greatest stack depth: 11288 bytes left [ 31.581335][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.612083][ T3465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.71'. [ 31.649450][ T3465] loop4: detected capacity change from 0 to 8192 [ 31.724227][ T3469] loop2: detected capacity change from 0 to 8192 [ 31.851312][ T3481] loop1: detected capacity change from 0 to 164 [ 31.860291][ T3481] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 31.880862][ T3481] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 31.917963][ T3161] usb 1-1: enqueue for inactive port 0 [ 31.924313][ T3161] usb 1-1: enqueue for inactive port 0 [ 31.960991][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.961006][ T29] audit: type=1400 audit(1721315260.894:169): avc: denied { ioctl } for pid=3486 comm="syz.1.79" path="socket:[3871]" dev="sockfs" ino=3871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.006620][ T3161] vhci_hcd: vhci_device speed not set [ 32.016212][ T29] audit: type=1400 audit(1721315260.944:170): avc: denied { setattr } for pid=3488 comm="syz.3.80" path="/dev/urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 32.069750][ T3492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 32.082434][ T3490] syz.1.79 uses obsolete (PF_INET,SOCK_PACKET) [ 32.103037][ T29] audit: type=1400 audit(1721315261.034:171): avc: denied { ioctl } for pid=3486 comm="syz.1.79" path="socket:[4455]" dev="sockfs" ino=4455 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.132583][ T29] audit: type=1400 audit(1721315261.064:172): avc: denied { setopt } for pid=3486 comm="syz.1.79" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.172935][ T3492] loop3: detected capacity change from 0 to 8192 [ 32.200148][ T3497] loop2: detected capacity change from 0 to 512 [ 32.205750][ T3494] loop4: detected capacity change from 0 to 8192 [ 32.216264][ T3497] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.83: bg 0: block 5: invalid block bitmap [ 32.231898][ T3497] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 32.253802][ T3497] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.83: invalid indirect mapped block 3 (level 2) [ 32.267305][ T3497] EXT4-fs (loop2): 1 orphan inode deleted [ 32.273043][ T3497] EXT4-fs (loop2): 1 truncate cleaned up [ 32.279373][ T3497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.455498][ T3511] loop0: detected capacity change from 0 to 512 [ 32.465811][ T3511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.87: bg 0: block 5: invalid block bitmap [ 32.485704][ T3511] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 32.495199][ T3511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.87: invalid indirect mapped block 3 (level 2) [ 32.509758][ T3511] EXT4-fs (loop0): 1 orphan inode deleted [ 32.515558][ T3511] EXT4-fs (loop0): 1 truncate cleaned up [ 32.517004][ T29] audit: type=1400 audit(1721315261.444:173): avc: denied { create } for pid=3513 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.522140][ T3511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.541270][ T29] audit: type=1400 audit(1721315261.444:174): avc: denied { execute } for pid=3513 comm="syz.3.88" name="file0" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.576027][ T29] audit: type=1400 audit(1721315261.444:175): avc: denied { execute_no_trans } for pid=3513 comm="syz.3.88" path="/13/file0" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.601299][ T29] audit: type=1400 audit(1721315261.534:176): avc: denied { create } for pid=3513 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.691682][ T3521] loop4: detected capacity change from 0 to 164 [ 32.698738][ T3521] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 33.015064][ T29] audit: type=1400 audit(1721315261.944:177): avc: denied { create } for pid=3528 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.055513][ T3497] syz.2.83 (3497) used greatest stack depth: 11280 bytes left [ 33.082002][ T29] audit: type=1400 audit(1721315261.964:178): avc: denied { map } for pid=3528 comm="syz.1.92" path="socket:[4533]" dev="sockfs" ino=4533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.083578][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.192620][ T3532] loop2: detected capacity change from 0 to 512 [ 33.212766][ T3532] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 33.241612][ T3532] EXT4-fs (loop2): invalid journal inode [ 33.261739][ T3532] EXT4-fs (loop2): can't get journal size [ 33.285485][ T3532] EXT4-fs (loop2): 1 truncate cleaned up [ 33.303557][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.312980][ T3532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.353238][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.406250][ T3535] loop0: detected capacity change from 0 to 512 [ 33.407765][ T3537] 9pnet_fd: Insufficient options for proto=fd [ 33.433398][ T3535] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.94: corrupted in-inode xattr: invalid ea_ino [ 33.483655][ T3535] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.94: couldn't read orphan inode 12 (err -117) [ 33.538404][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.581605][ T3546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 33.619074][ T3535] syz.0.94[3535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.619268][ T3535] syz.0.94[3535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.686968][ T3535] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 33.722269][ T3550] loop3: detected capacity change from 0 to 8192 [ 33.724301][ T3545] loop4: detected capacity change from 0 to 8192 [ 33.757144][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 33.792554][ T3549] loop2: detected capacity change from 0 to 8192 [ 33.812030][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.907164][ T3562] loop0: detected capacity change from 0 to 512 [ 33.920159][ T3562] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.104: bg 0: block 5: invalid block bitmap [ 33.935617][ T3562] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 33.954517][ T3562] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.104: invalid indirect mapped block 3 (level 2) [ 33.975332][ T3562] EXT4-fs (loop0): 1 orphan inode deleted [ 33.981182][ T3562] EXT4-fs (loop0): 1 truncate cleaned up [ 33.986710][ T3565] loop3: detected capacity change from 0 to 512 [ 33.994384][ T3562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.005923][ T3565] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.016478][ T3565] EXT4-fs (loop3): invalid journal inode [ 34.027067][ T3565] EXT4-fs (loop3): can't get journal size [ 34.034808][ T3565] EXT4-fs (loop3): 1 truncate cleaned up [ 34.041102][ T3565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.070080][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.550915][ T3597] loop2: detected capacity change from 0 to 512 [ 34.567887][ T3597] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 34.584880][ T3597] EXT4-fs (loop2): invalid journal inode [ 34.599904][ T3597] EXT4-fs (loop2): can't get journal size [ 34.607304][ T3597] EXT4-fs (loop2): 1 truncate cleaned up [ 34.613381][ T3597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.671351][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.736999][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.818276][ T3605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 34.836424][ T3613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.120'. [ 34.870510][ T3605] loop2: detected capacity change from 0 to 512 [ 34.909195][ T3605] EXT4-fs (loop2): too many log groups per flexible block group [ 34.916949][ T3605] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 34.942207][ T3605] EXT4-fs (loop2): mount failed [ 35.103543][ T3618] loop0: detected capacity change from 0 to 8192 [ 35.108163][ T3631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 35.113204][ T58] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 35.140934][ T3631] loop3: detected capacity change from 0 to 512 [ 35.198519][ T3631] EXT4-fs (loop3): too many log groups per flexible block group [ 35.206374][ T3631] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 35.213426][ T3631] EXT4-fs (loop3): mount failed [ 35.237788][ T3644] loop4: detected capacity change from 0 to 512 [ 35.252562][ T3644] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.129: bg 0: block 5: invalid block bitmap [ 35.265521][ T3644] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 35.274849][ T3644] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.129: invalid indirect mapped block 3 (level 2) [ 35.288995][ T3644] EXT4-fs (loop4): 1 orphan inode deleted [ 35.294834][ T3644] EXT4-fs (loop4): 1 truncate cleaned up [ 35.313299][ T3644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.889399][ T3663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'. [ 35.916630][ T24] usb 7-1: enqueue for inactive port 0 [ 35.924329][ T24] usb 7-1: enqueue for inactive port 0 [ 35.939981][ T3663] loop3: detected capacity change from 0 to 8192 [ 35.971870][ T3666] loop0: detected capacity change from 0 to 8192 [ 36.016182][ T24] vhci_hcd: vhci_device speed not set [ 36.081022][ T3669] loop0: detected capacity change from 0 to 512 [ 36.088740][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.108066][ T3669] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.137: casefold flag without casefold feature [ 36.126006][ T3669] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.137: couldn't read orphan inode 15 (err -117) [ 36.138380][ T3669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.202991][ T3677] loop2: detected capacity change from 0 to 8192 [ 36.247791][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.595382][ T3689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 36.596941][ T3694] __nla_validate_parse: 1 callbacks suppressed [ 36.596954][ T3694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'. [ 36.700286][ T3696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 36.719348][ T3689] loop0: detected capacity change from 0 to 512 [ 36.758270][ T3689] EXT4-fs (loop0): too many log groups per flexible block group [ 36.766028][ T3689] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 36.786168][ T3689] EXT4-fs (loop0): mount failed [ 36.822990][ T3702] loop3: detected capacity change from 0 to 512 [ 36.874076][ T3702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.148: bg 0: block 5: invalid block bitmap [ 36.893372][ T3696] loop1: detected capacity change from 0 to 8192 [ 36.917191][ T3702] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 36.987840][ T3702] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.148: invalid indirect mapped block 3 (level 2) [ 37.002832][ T3702] EXT4-fs (loop3): 1 orphan inode deleted [ 37.008729][ T3702] EXT4-fs (loop3): 1 truncate cleaned up [ 37.014827][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.054223][ T3713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.153'. [ 37.096507][ T3709] loop2: detected capacity change from 0 to 8192 [ 37.157316][ T3713] loop4: detected capacity change from 0 to 8192 [ 37.309089][ T3727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.157'. [ 37.372439][ T3727] loop1: detected capacity change from 0 to 8192 [ 37.490169][ C0] hrtimer: interrupt took 28676 ns [ 37.610544][ T3735] loop4: detected capacity change from 0 to 8192 [ 37.625526][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.888717][ T3753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.168'. [ 38.027966][ T3753] loop3: detected capacity change from 0 to 8192 [ 38.123399][ T3762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'. [ 38.127968][ T3760] loop0: detected capacity change from 0 to 8192 [ 38.313292][ T3762] loop1: detected capacity change from 0 to 8192 [ 38.520052][ T3769] loop4: detected capacity change from 0 to 512 [ 38.531204][ T3769] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.173: bg 0: block 5: invalid block bitmap [ 38.555942][ T3769] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 38.566070][ T3769] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.173: invalid indirect mapped block 3 (level 2) [ 38.581662][ T3769] EXT4-fs (loop4): 1 orphan inode deleted [ 38.587557][ T3769] EXT4-fs (loop4): 1 truncate cleaned up [ 38.594805][ T3769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.639327][ T3775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.175'. [ 38.750089][ T3775] loop2: detected capacity change from 0 to 8192 [ 38.916545][ T3792] Zero length message leads to an empty skb [ 38.991609][ T3795] loop0: detected capacity change from 0 to 8192 [ 39.359619][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.427606][ T3805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.186'. [ 39.469296][ T3809] loop0: detected capacity change from 0 to 512 [ 39.556321][ T3805] loop4: detected capacity change from 0 to 8192 [ 39.577345][ T3809] loop0: detected capacity change from 0 to 2048 [ 39.608011][ T3809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.634229][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 39.634245][ T29] audit: type=1400 audit(1721315268.564:253): avc: denied { watch } for pid=3808 comm="syz.0.188" path="/39/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.907920][ T3825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 39.927696][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.994315][ T3825] loop3: detected capacity change from 0 to 8192 [ 40.042900][ T3832] loop2: detected capacity change from 0 to 512 [ 40.050882][ T3828] loop1: detected capacity change from 0 to 8192 [ 40.065584][ T3832] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 40.077288][ T3832] EXT4-fs (loop2): invalid journal inode [ 40.085499][ T3832] EXT4-fs (loop2): can't get journal size [ 40.098398][ T3832] EXT4-fs (loop2): 1 truncate cleaned up [ 40.104364][ T3832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.147463][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.470827][ T3860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 40.531774][ T3860] loop3: detected capacity change from 0 to 8192 [ 40.552581][ T3862] loop1: detected capacity change from 0 to 8192 [ 40.920286][ T3868] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 40.926997][ T3868] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 40.934670][ T3868] vhci_hcd vhci_hcd.0: Device attached [ 41.089102][ T3875] loop0: detected capacity change from 0 to 512 [ 41.105980][ T3875] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 41.121770][ T3875] EXT4-fs (loop0): invalid journal inode [ 41.137241][ T3875] EXT4-fs (loop0): can't get journal size [ 41.146129][ T8] vhci_hcd: vhci_device speed not set [ 41.162468][ T3875] EXT4-fs (loop0): 1 truncate cleaned up [ 41.178175][ T3875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.219190][ T8] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 41.288327][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.454440][ T3890] loop2: detected capacity change from 0 to 8192 [ 41.456150][ T29] audit: type=1400 audit(1721315270.384:254): avc: denied { setopt } for pid=3895 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.480908][ T3869] vhci_hcd: connection reset by peer [ 41.506450][ T3199] vhci_hcd: stop threads [ 41.510741][ T3199] vhci_hcd: release socket [ 41.515154][ T3199] vhci_hcd: disconnect device [ 41.555947][ T3894] loop4: detected capacity change from 0 to 8192 [ 41.586298][ T29] audit: type=1400 audit(1721315270.524:255): avc: denied { ioctl } for pid=3895 comm="syz.0.218" path="socket:[5556]" dev="sockfs" ino=5556 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.705719][ T3898] loop1: detected capacity change from 0 to 8192 [ 41.807479][ T3914] __nla_validate_parse: 4 callbacks suppressed [ 41.807492][ T3914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'. [ 41.919249][ T3914] loop0: detected capacity change from 0 to 8192 [ 42.083020][ T3918] loop2: detected capacity change from 0 to 512 [ 42.093774][ T3918] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 42.120443][ T3918] EXT4-fs (loop2): invalid journal inode [ 42.125893][ T3920] loop0: detected capacity change from 0 to 512 [ 42.126535][ T3918] EXT4-fs (loop2): can't get journal size [ 42.146888][ T3918] EXT4-fs (loop2): 1 truncate cleaned up [ 42.158544][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.172679][ T3920] loop0: detected capacity change from 0 to 2048 [ 42.189970][ T3920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.232668][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.259521][ T3928] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 42.266143][ T3928] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.273767][ T3928] vhci_hcd vhci_hcd.0: Device attached [ 42.289935][ T3928] netlink: 6 bytes leftover after parsing attributes in process `syz.4.229'. [ 42.320629][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.439177][ T3948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.236'. [ 42.486141][ T24] vhci_hcd: vhci_device speed not set [ 42.556166][ T24] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 42.587755][ T3953] loop2: detected capacity change from 0 to 512 [ 42.587861][ T3948] loop1: detected capacity change from 0 to 8192 [ 42.619106][ T3953] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 42.658388][ T3953] EXT4-fs (loop2): invalid journal inode [ 42.667896][ T3953] EXT4-fs (loop2): can't get journal size [ 42.694805][ T3953] EXT4-fs (loop2): 1 truncate cleaned up [ 42.712268][ T3953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.763994][ T3956] loop3: detected capacity change from 0 to 512 [ 42.784092][ T3956] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 42.799339][ T3956] EXT4-fs (loop3): invalid journal inode [ 42.811590][ T3956] EXT4-fs (loop3): can't get journal size [ 42.821899][ T3929] vhci_hcd: connection reset by peer [ 42.832660][ T58] vhci_hcd: stop threads [ 42.836995][ T58] vhci_hcd: release socket [ 42.841420][ T58] vhci_hcd: disconnect device [ 42.843448][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.856970][ T3956] EXT4-fs (loop3): 1 truncate cleaned up [ 42.866781][ T3961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.242'. [ 42.891897][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.011895][ T3971] loop2: detected capacity change from 0 to 512 [ 43.011874][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.149725][ T3961] loop4: detected capacity change from 0 to 8192 [ 43.161503][ T3975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.201684][ T3982] loop2: detected capacity change from 0 to 2048 [ 43.203816][ T3975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 43.229084][ T3982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.241725][ T3975] loop3: detected capacity change from 0 to 512 [ 43.287279][ T3975] EXT4-fs (loop3): too many log groups per flexible block group [ 43.294986][ T3975] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 43.318582][ T3975] EXT4-fs (loop3): mount failed [ 43.351425][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.372512][ T29] audit: type=1400 audit(1721315272.304:256): avc: denied { ioctl } for pid=3994 comm="syz.0.249" path="socket:[6323]" dev="sockfs" ino=6323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.428237][ T4002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 43.465866][ T3998] loop2: detected capacity change from 0 to 8192 [ 43.512391][ T29] audit: type=1400 audit(1721315272.444:257): avc: denied { unmount } for pid=3085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 43.554868][ T4008] loop0: detected capacity change from 0 to 512 [ 43.565425][ T4002] loop3: detected capacity change from 0 to 8192 [ 43.575561][ T4008] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 43.587142][ T4008] EXT4-fs (loop0): invalid journal inode [ 43.605762][ T4008] EXT4-fs (loop0): can't get journal size [ 43.612955][ T4008] EXT4-fs (loop0): 1 truncate cleaned up [ 43.623564][ T4016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.256'. [ 43.626218][ T4008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.719392][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.849747][ T4016] loop4: detected capacity change from 0 to 8192 [ 43.904973][ T29] audit: type=1400 audit(1721315272.834:258): avc: denied { read } for pid=4020 comm="syz.0.258" name="event2" dev="devtmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.928009][ T29] audit: type=1400 audit(1721315272.834:259): avc: denied { open } for pid=4020 comm="syz.0.258" path="/dev/input/event2" dev="devtmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.952197][ T29] audit: type=1400 audit(1721315272.834:260): avc: denied { ioctl } for pid=4020 comm="syz.0.258" path="/dev/input/event2" dev="devtmpfs" ino=230 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.034528][ T4027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'. [ 44.333236][ T4037] loop3: detected capacity change from 0 to 512 [ 44.356973][ T4037] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 44.358434][ T4027] loop0: detected capacity change from 0 to 8192 [ 44.383752][ T4037] EXT4-fs (loop3): invalid journal inode [ 44.432989][ T4037] EXT4-fs (loop3): can't get journal size [ 44.460936][ T4037] EXT4-fs (loop3): 1 truncate cleaned up [ 44.490075][ T4037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.552239][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.589503][ T4046] loop2: detected capacity change from 0 to 512 [ 44.632665][ T4046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.647596][ T4046] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.681541][ T4062] loop4: detected capacity change from 0 to 512 [ 44.691360][ T4062] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 44.708385][ T4062] EXT4-fs (loop4): invalid journal inode [ 44.714086][ T4062] EXT4-fs (loop4): can't get journal size [ 44.720528][ T4062] EXT4-fs (loop4): 1 truncate cleaned up [ 44.725735][ T4046] syz.2.267 (4046) used greatest stack depth: 10816 bytes left [ 44.726338][ T29] audit: type=1400 audit(1721315273.654:261): avc: denied { ioctl } for pid=4043 comm="syz.2.267" path="/66/bus/cpuset.effective_mems" dev="loop2" ino=19 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.735660][ T4062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.778010][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.804057][ T4076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.823966][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.852807][ T4076] loop1: detected capacity change from 0 to 8192 [ 44.857068][ T4077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'. [ 44.944642][ T4077] loop2: detected capacity change from 0 to 8192 [ 45.085604][ T4085] loop1: detected capacity change from 0 to 8192 [ 45.513804][ T4097] loop3: detected capacity change from 0 to 8192 [ 45.638166][ T4103] loop0: detected capacity change from 0 to 512 [ 45.665993][ T4103] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.685361][ T4103] EXT4-fs (loop0): invalid journal inode [ 45.715601][ T4103] EXT4-fs (loop0): can't get journal size [ 45.729732][ T4103] EXT4-fs (loop0): 1 truncate cleaned up [ 45.735908][ T4103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.785842][ T4108] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 45.792485][ T4108] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 45.800225][ T4108] vhci_hcd vhci_hcd.0: Device attached [ 45.819658][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.859466][ T4115] loop0: detected capacity change from 0 to 512 [ 45.883432][ T4115] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.290: bg 0: block 5: invalid block bitmap [ 45.909572][ T4115] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 45.943025][ T4115] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.290: invalid indirect mapped block 3 (level 2) [ 45.957276][ T4115] EXT4-fs (loop0): 1 orphan inode deleted [ 45.963078][ T4115] EXT4-fs (loop0): 1 truncate cleaned up [ 45.970261][ T4115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.060216][ T4130] loop1: detected capacity change from 0 to 8192 [ 46.113086][ T4138] loop2: detected capacity change from 0 to 512 [ 46.137918][ T4138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.150815][ T4138] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.223759][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.305662][ T4146] loop2: detected capacity change from 0 to 512 [ 46.322257][ T8] usb 3-1: enqueue for inactive port 0 [ 46.331897][ T4109] vhci_hcd: connection closed [ 46.338160][ T4146] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 46.338524][ T1609] vhci_hcd: stop threads [ 46.349397][ T4146] EXT4-fs (loop2): invalid journal inode [ 46.351583][ T1609] vhci_hcd: release socket [ 46.365903][ T1609] vhci_hcd: disconnect device [ 46.368831][ T4146] EXT4-fs (loop2): can't get journal size [ 46.380774][ T8] usb 3-1: enqueue for inactive port 0 [ 46.436186][ T4146] EXT4-fs (loop2): 1 truncate cleaned up [ 46.456014][ T4146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.476181][ T8] vhci_hcd: vhci_device speed not set [ 46.548032][ T3085] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.564041][ T4154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.599371][ T4159] loop4: detected capacity change from 0 to 512 [ 46.631901][ T4159] EXT4-fs (loop4): too many log groups per flexible block group [ 46.641189][ T4159] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 46.710198][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.744550][ T4159] EXT4-fs (loop4): mount failed [ 46.966396][ T4179] __nla_validate_parse: 5 callbacks suppressed [ 46.966413][ T4179] netlink: 52 bytes leftover after parsing attributes in process `syz.4.311'. [ 47.004877][ T29] audit: type=1400 audit(1721315275.934:262): avc: denied { mounton } for pid=4180 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.039595][ T4174] loop0: detected capacity change from 0 to 8192 [ 47.049179][ T4179] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 47.055714][ T4179] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.063416][ T4179] vhci_hcd vhci_hcd.0: Device attached [ 47.068446][ T4185] loop3: detected capacity change from 0 to 512 [ 47.093513][ T4185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.102769][ T4179] netlink: 6 bytes leftover after parsing attributes in process `syz.4.311'. [ 47.109680][ T4185] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.148560][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.191402][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.243199][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.310507][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.338056][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 47.341127][ T4208] loop3: detected capacity change from 0 to 512 [ 47.360656][ T4208] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 47.381100][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.387265][ T4208] EXT4-fs (loop3): invalid journal inode [ 47.399339][ T4208] EXT4-fs (loop3): can't get journal size [ 47.414182][ T4208] EXT4-fs (loop3): 1 truncate cleaned up [ 47.422423][ T4208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.461242][ T29] audit: type=1400 audit(1721315276.384:263): avc: denied { read } for pid=4216 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.482331][ T29] audit: type=1400 audit(1721315276.394:264): avc: denied { read } for pid=4216 comm="syz.0.317" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.523069][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.523380][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.530332][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.552661][ T4180] bridge_slave_0: entered allmulticast mode [ 47.559852][ T4180] bridge_slave_0: entered promiscuous mode [ 47.588896][ T40] bridge_slave_1: left allmulticast mode [ 47.594582][ T40] bridge_slave_1: left promiscuous mode [ 47.600486][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.617523][ T40] bridge_slave_0: left allmulticast mode [ 47.623526][ T40] bridge_slave_0: left promiscuous mode [ 47.629245][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.667601][ T4231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.319'. [ 47.685041][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 47.694913][ T4182] vhci_hcd: connection reset by peer [ 47.700648][ T50] vhci_hcd: stop threads [ 47.705459][ T50] vhci_hcd: release socket [ 47.710051][ T50] vhci_hcd: disconnect device [ 47.716351][ T24] usb 9-1: enqueue for inactive port 0 [ 47.721941][ T24] usb 9-1: enqueue for inactive port 0 [ 47.731852][ T4231] loop3: detected capacity change from 0 to 512 [ 47.747408][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.769758][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.787514][ T4231] EXT4-fs (loop3): too many log groups per flexible block group [ 47.795292][ T4231] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 47.804244][ T40] bond0 (unregistering): Released all slaves [ 47.814500][ T4231] EXT4-fs (loop3): mount failed [ 47.819728][ T4241] loop1: detected capacity change from 0 to 8192 [ 47.829823][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.837085][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.845069][ T24] vhci_hcd: vhci_device speed not set [ 47.851381][ T4180] bridge_slave_1: entered allmulticast mode [ 47.859132][ T4180] bridge_slave_1: entered promiscuous mode [ 47.892829][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.905849][ T29] audit: type=1400 audit(1721315276.834:265): avc: denied { search } for pid=2823 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.915143][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.936493][ T29] audit: type=1400 audit(1721315276.834:266): avc: denied { read } for pid=2823 comm="dhcpcd" name="n25" dev="tmpfs" ino=3003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.958233][ T29] audit: type=1400 audit(1721315276.834:267): avc: denied { open } for pid=2823 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.981173][ T29] audit: type=1400 audit(1721315276.834:268): avc: denied { getattr } for pid=2823 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.022738][ T40] hsr_slave_0: left promiscuous mode [ 48.028649][ T40] hsr_slave_1: left promiscuous mode [ 48.034557][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.042032][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.052465][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.059950][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.070031][ T40] veth1_macvtap: left promiscuous mode [ 48.075698][ T40] veth0_macvtap: left promiscuous mode [ 48.081517][ T40] veth1_vlan: left promiscuous mode [ 48.086758][ T40] veth0_vlan: left promiscuous mode [ 48.169655][ T40] team0 (unregistering): Port device team_slave_1 removed [ 48.180711][ T40] team0 (unregistering): Port device team_slave_0 removed [ 48.215294][ T4180] team0: Port device team_slave_0 added [ 48.221958][ T4180] team0: Port device team_slave_1 added [ 48.238527][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.245556][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.271585][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.282688][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.289767][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.315833][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.340535][ T4180] hsr_slave_0: entered promiscuous mode [ 48.346921][ T4180] hsr_slave_1: entered promiscuous mode [ 48.353167][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.360742][ T4180] Cannot create hsr debugfs directory [ 48.490020][ T4255] loop1: detected capacity change from 0 to 512 [ 48.502460][ T29] audit: type=1400 audit(1721315277.434:269): avc: denied { read } for pid=4262 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.516739][ T4265] netlink: 52 bytes leftover after parsing attributes in process `syz.3.332'. [ 48.525389][ T29] audit: type=1400 audit(1721315277.434:270): avc: denied { open } for pid=4262 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.566442][ T4255] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 48.576378][ T4255] EXT4-fs (loop1): invalid journal inode [ 48.582040][ T4255] EXT4-fs (loop1): can't get journal size [ 48.606358][ T4255] EXT4-fs (loop1): 1 truncate cleaned up [ 48.631329][ T4273] loop4: detected capacity change from 0 to 512 [ 48.633855][ T4255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.659687][ T4265] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 48.666248][ T4265] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.674158][ T4265] vhci_hcd vhci_hcd.0: Device attached [ 48.695076][ T4273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.709689][ T4273] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.710647][ T4265] netlink: 6 bytes leftover after parsing attributes in process `syz.3.332'. [ 48.733609][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.782795][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.795586][ T4288] loop1: detected capacity change from 0 to 8192 [ 48.817334][ T4180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.875214][ T4180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.882017][ T9] vhci_hcd: vhci_device speed not set [ 48.908856][ T4180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.930307][ T4180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.956597][ T9] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 49.052022][ T4318] FAULT_INJECTION: forcing a failure. [ 49.052022][ T4318] name failslab, interval 1, probability 0, space 0, times 0 [ 49.064709][ T4318] CPU: 0 PID: 4318 Comm: syz.0.340 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 49.074477][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.084568][ T4318] Call Trace: [ 49.087853][ T4318] [ 49.090775][ T4318] dump_stack_lvl+0xf2/0x150 [ 49.095372][ T4318] dump_stack+0x15/0x20 [ 49.099592][ T4318] should_fail_ex+0x229/0x230 [ 49.104327][ T4318] ? __alloc_skb+0x10b/0x310 [ 49.108932][ T4318] __should_failslab+0x92/0xa0 [ 49.114302][ T4318] should_failslab+0x9/0x20 [ 49.118838][ T4318] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 49.124656][ T4318] __alloc_skb+0x10b/0x310 [ 49.129156][ T4318] netlink_alloc_large_skb+0xad/0xe0 [ 49.134497][ T4318] netlink_sendmsg+0x3b4/0x6e0 [ 49.139270][ T4318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.144577][ T4318] __sock_sendmsg+0x140/0x180 [ 49.149261][ T4318] ____sys_sendmsg+0x312/0x410 [ 49.154121][ T4318] __sys_sendmsg+0x1e9/0x280 [ 49.158732][ T4318] __x64_sys_sendmsg+0x46/0x50 [ 49.163522][ T4318] x64_sys_call+0x2689/0x2d60 [ 49.168245][ T4318] do_syscall_64+0xc9/0x1c0 [ 49.172774][ T4318] ? clear_bhb_loop+0x55/0xb0 [ 49.177472][ T4318] ? clear_bhb_loop+0x55/0xb0 [ 49.182243][ T4318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.188161][ T4318] RIP: 0033:0x7f915f785b59 [ 49.193051][ T4318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.212664][ T4318] RSP: 002b:00007f915ea07048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.221178][ T4318] RAX: ffffffffffffffda RBX: 00007f915f913f60 RCX: 00007f915f785b59 [ 49.229155][ T4318] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000005 [ 49.237201][ T4318] RBP: 00007f915ea070a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.245174][ T4318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.253628][ T4318] R13: 000000000000000b R14: 00007f915f913f60 R15: 00007ffdba3a1768 [ 49.261759][ T4318] [ 49.290494][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.320710][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.340420][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.347518][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.371002][ T4323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'. [ 49.376663][ T4271] vhci_hcd: connection reset by peer [ 49.399196][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.409720][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.426797][ T40] vhci_hcd: stop threads [ 49.431108][ T40] vhci_hcd: release socket [ 49.435517][ T40] vhci_hcd: disconnect device [ 49.469703][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.476808][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.520476][ T4327] loop3: detected capacity change from 0 to 512 [ 49.541274][ T4330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 49.553817][ T4327] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 49.590418][ T4327] EXT4-fs (loop3): invalid journal inode [ 49.613958][ T4327] EXT4-fs (loop3): can't get journal size [ 49.628128][ T4323] loop0: detected capacity change from 0 to 8192 [ 49.636230][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.665557][ T4327] EXT4-fs (loop3): 1 truncate cleaned up [ 49.676742][ T4327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.681523][ T4330] loop1: detected capacity change from 0 to 8192 [ 49.800229][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.853569][ T4180] veth0_vlan: entered promiscuous mode [ 49.860610][ T4346] loop4: detected capacity change from 0 to 512 [ 49.878424][ T4180] veth1_vlan: entered promiscuous mode [ 49.878424][ T4346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.898185][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 49.898199][ T29] audit: type=1400 audit(1721315278.834:281): avc: denied { create } for pid=4348 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 49.898682][ T4346] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.949017][ T4180] veth0_macvtap: entered promiscuous mode [ 49.957170][ T4180] veth1_macvtap: entered promiscuous mode [ 49.973008][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.983507][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.993351][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.003900][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.013720][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.024287][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.034143][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.044840][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.055813][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.066152][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.076623][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.086484][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.096920][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.106736][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.117240][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.127062][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.137569][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.160274][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.174885][ T4180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.183772][ T4180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.192523][ T4180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.201553][ T4180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.216961][ T4361] netlink: 52 bytes leftover after parsing attributes in process `syz.0.351'. [ 50.233908][ T4361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 50.240513][ T4361] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.248370][ T4361] vhci_hcd vhci_hcd.0: Device attached [ 50.249078][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.266968][ T4361] netlink: 6 bytes leftover after parsing attributes in process `syz.0.351'. [ 50.359097][ T4368] loop4: detected capacity change from 0 to 8192 [ 50.393129][ T4371] loop1: detected capacity change from 0 to 8192 [ 50.806151][ T4363] vhci_hcd: connection closed [ 50.807096][ T3199] vhci_hcd: stop threads [ 50.816031][ T3199] vhci_hcd: release socket [ 50.820522][ T3199] vhci_hcd: disconnect device [ 50.941865][ T4401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'. [ 51.083766][ T4401] loop0: detected capacity change from 0 to 8192 [ 51.263316][ T4407] loop3: detected capacity change from 0 to 8192 [ 51.462102][ T4419] loop2: detected capacity change from 0 to 8192 [ 51.598694][ T4425] loop0: detected capacity change from 0 to 8192 [ 51.792299][ T4432] loop1: detected capacity change from 0 to 8192 [ 51.820430][ T4438] tipc: Enabling of bearer rejected, failed to enable media [ 51.920708][ T58] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 51.934133][ T4453] loop3: detected capacity change from 0 to 512 [ 51.988998][ T4453] EXT4-fs (loop3): too many log groups per flexible block group [ 51.992873][ T4457] loop2: detected capacity change from 0 to 512 [ 51.996865][ T4453] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 52.009422][ T4457] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 52.019081][ T4453] EXT4-fs (loop3): mount failed [ 52.065793][ T4457] EXT4-fs (loop2): invalid journal inode [ 52.104109][ T4457] EXT4-fs (loop2): can't get journal size [ 52.118836][ T4460] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.126352][ T4460] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 52.155067][ T4457] EXT4-fs (loop2): 1 truncate cleaned up [ 52.175670][ T29] audit: type=1400 audit(1721315281.004:282): avc: denied { create } for pid=4441 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.195303][ T29] audit: type=1400 audit(1721315281.004:283): avc: denied { ioctl } for pid=4441 comm="syz.4.377" path="socket:[7730]" dev="sockfs" ino=7730 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.219941][ T29] audit: type=1400 audit(1721315281.054:284): avc: denied { create } for pid=4441 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.240052][ T29] audit: type=1400 audit(1721315281.054:285): avc: denied { write } for pid=4441 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.268220][ T4457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.325457][ T4180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.689875][ T4477] __nla_validate_parse: 4 callbacks suppressed [ 52.689889][ T4477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'. [ 52.728333][ T4479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'. [ 52.753268][ T29] audit: type=1400 audit(1721315281.684:286): avc: denied { bind } for pid=4480 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.762284][ T4477] loop2: detected capacity change from 0 to 8192 [ 52.797822][ T29] audit: type=1400 audit(1721315281.734:287): avc: denied { create } for pid=4480 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.818603][ T4479] loop1: detected capacity change from 0 to 8192 [ 52.852411][ T29] audit: type=1400 audit(1721315281.734:288): avc: denied { connect } for pid=4480 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.863159][ T4483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.386'. [ 52.871872][ T29] audit: type=1400 audit(1721315281.734:289): avc: denied { write } for pid=4480 comm="syz.3.385" laddr=fe80::e lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.954266][ T4483] loop3: detected capacity change from 0 to 8192 [ 53.201549][ T4494] loop0: detected capacity change from 0 to 128 [ 53.211892][ T4494] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.225904][ T4494] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.264742][ T29] audit: type=1400 audit(1721315282.194:290): avc: denied { create } for pid=4493 comm="syz.0.389" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.295819][ T3091] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.344566][ T4499] loop1: detected capacity change from 0 to 512 [ 53.366257][ T4499] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 53.381996][ T4499] EXT4-fs (loop1): invalid journal inode [ 53.391458][ T4499] EXT4-fs (loop1): can't get journal size [ 53.398514][ T4499] EXT4-fs (loop1): 1 truncate cleaned up [ 53.404635][ T4499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.432740][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.515731][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.400'. [ 53.525516][ T4526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.395'. [ 53.528111][ T4528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'. [ 53.535544][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 53.567188][ T4526] loop1: detected capacity change from 0 to 512 [ 53.592545][ T4526] EXT4-fs (loop1): too many log groups per flexible block group [ 53.593167][ T4524] loop3: detected capacity change from 0 to 8192 [ 53.601350][ T4526] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 53.616151][ T4526] EXT4-fs (loop1): mount failed [ 53.629665][ T4528] loop2: detected capacity change from 0 to 8192 [ 53.839567][ T4535] netlink: 52 bytes leftover after parsing attributes in process `syz.4.403'. [ 53.850623][ T4535] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 53.857205][ T4535] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.864950][ T4535] vhci_hcd vhci_hcd.0: Device attached [ 53.872574][ T4535] netlink: 6 bytes leftover after parsing attributes in process `syz.4.403'. [ 53.977760][ T4547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.405'. [ 53.996196][ T9] usb 7-1: enqueue for inactive port 0 [ 54.001920][ T9] usb 7-1: enqueue for inactive port 0 [ 54.018809][ T4547] loop2: detected capacity change from 0 to 512 [ 54.037448][ T4547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.050050][ T4547] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.066631][ T3163] vhci_hcd: vhci_device speed not set [ 54.073296][ T4547] xt_recent: Unsupported userspace flags (00000042) [ 54.086216][ T9] vhci_hcd: vhci_device speed not set [ 54.136191][ T3163] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 54.312297][ T4552] netlink: 277 bytes leftover after parsing attributes in process `syz.3.408'. [ 54.356555][ T4547] syz.2.405 (4547) used greatest stack depth: 10448 bytes left [ 54.384592][ T4180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.384690][ T4563] FAULT_INJECTION: forcing a failure. [ 54.384690][ T4563] name failslab, interval 1, probability 0, space 0, times 0 [ 54.406243][ T4563] CPU: 0 PID: 4563 Comm: syz.3.414 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 54.415961][ T4563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.426015][ T4563] Call Trace: [ 54.429295][ T4563] [ 54.432279][ T4563] dump_stack_lvl+0xf2/0x150 [ 54.436897][ T4563] dump_stack+0x15/0x20 [ 54.441150][ T4563] should_fail_ex+0x229/0x230 [ 54.445843][ T4563] ? __alloc_skb+0x10b/0x310 [ 54.450462][ T4563] __should_failslab+0x92/0xa0 [ 54.455295][ T4563] should_failslab+0x9/0x20 [ 54.459892][ T4563] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 54.465741][ T4563] __alloc_skb+0x10b/0x310 [ 54.467437][ T4536] vhci_hcd: connection reset by peer [ 54.470259][ T4563] netlink_alloc_large_skb+0xad/0xe0 [ 54.475909][ T58] vhci_hcd: stop threads [ 54.480806][ T4563] netlink_sendmsg+0x3b4/0x6e0 [ 54.480839][ T4563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.485054][ T58] vhci_hcd: release socket [ 54.485070][ T58] vhci_hcd: disconnect device [ 54.489786][ T4563] __sock_sendmsg+0x140/0x180 [ 54.489808][ T4563] ____sys_sendmsg+0x312/0x410 [ 54.513635][ T4563] __sys_sendmsg+0x1e9/0x280 [ 54.518309][ T4563] __x64_sys_sendmsg+0x46/0x50 [ 54.523179][ T4563] x64_sys_call+0x2689/0x2d60 [ 54.527878][ T4563] do_syscall_64+0xc9/0x1c0 [ 54.532401][ T4563] ? clear_bhb_loop+0x55/0xb0 [ 54.537150][ T4563] ? clear_bhb_loop+0x55/0xb0 [ 54.541840][ T4563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.547820][ T4563] RIP: 0033:0x7f613ff65b59 [ 54.552217][ T4563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.571879][ T4563] RSP: 002b:00007f613f1e7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.580349][ T4563] RAX: ffffffffffffffda RBX: 00007f61400f3f60 RCX: 00007f613ff65b59 [ 54.588299][ T4563] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 54.596253][ T4563] RBP: 00007f613f1e70a0 R08: 0000000000000000 R09: 0000000000000000 [ 54.604409][ T4563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.612367][ T4563] R13: 000000000000000b R14: 00007f61400f3f60 R15: 00007fff0e9fbc98 [ 54.620323][ T4563] [ 54.653003][ T4578] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.695451][ T4580] netlink: 'syz.4.420': attribute type 10 has an invalid length. [ 54.752508][ T4580] team0: Port device netdevsim1 added [ 54.759545][ T4573] loop0: detected capacity change from 0 to 8192 [ 54.764215][ T4579] loop2: detected capacity change from 0 to 8192 [ 54.806740][ T4589] FAULT_INJECTION: forcing a failure. [ 54.806740][ T4589] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.819865][ T4589] CPU: 0 PID: 4589 Comm: syz.4.425 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 54.829508][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 54.839578][ T4589] Call Trace: [ 54.842861][ T4589] [ 54.845797][ T4589] dump_stack_lvl+0xf2/0x150 [ 54.850447][ T4589] dump_stack+0x15/0x20 [ 54.854606][ T4589] should_fail_ex+0x229/0x230 [ 54.859324][ T4589] should_fail+0xb/0x10 [ 54.863533][ T4589] should_fail_usercopy+0x1a/0x20 [ 54.868675][ T4589] _copy_from_iter+0xd3/0xb00 [ 54.873362][ T4589] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 54.878907][ T4589] copy_page_from_iter+0x14f/0x280 [ 54.884086][ T4589] tun_get_user+0x689/0x24b0 [ 54.888672][ T4589] ? kstrtoull+0x110/0x140 [ 54.893146][ T4589] ? ref_tracker_alloc+0x1f5/0x2f0 [ 54.898304][ T4589] tun_chr_write_iter+0x18e/0x240 [ 54.903330][ T4589] vfs_write+0x78f/0x900 [ 54.907567][ T4589] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 54.913107][ T4589] ksys_write+0xeb/0x1b0 [ 54.917340][ T4589] __x64_sys_write+0x42/0x50 [ 54.921916][ T4589] x64_sys_call+0x27dd/0x2d60 [ 54.926584][ T4589] do_syscall_64+0xc9/0x1c0 [ 54.931076][ T4589] ? clear_bhb_loop+0x55/0xb0 [ 54.935844][ T4589] ? clear_bhb_loop+0x55/0xb0 [ 54.940509][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.946401][ T4589] RIP: 0033:0x7ff0625146df [ 54.950870][ T4589] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 54.970469][ T4589] RSP: 002b:00007ff061797010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 54.978880][ T4589] RAX: ffffffffffffffda RBX: 00007ff0626a3f60 RCX: 00007ff0625146df [ 54.986841][ T4589] RDX: 0000000000000068 RSI: 0000000020000340 RDI: 00000000000000c8 [ 54.994801][ T4589] RBP: 00007ff0617970a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.002759][ T4589] R10: 0000000000000068 R11: 0000000000000293 R12: 0000000000000001 [ 55.010721][ T4589] R13: 000000000000000b R14: 00007ff0626a3f60 R15: 00007ffe874ce5b8 [ 55.018805][ T4589] [ 55.031410][ T4586] loop3: detected capacity change from 0 to 8192 [ 55.094099][ T4596] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 55.100642][ T4596] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 55.108365][ T4596] vhci_hcd vhci_hcd.0: Device attached [ 55.337837][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 55.337849][ T29] audit: type=1326 audit(1721315284.274:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.1.430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96466a5b59 code=0x0 [ 55.503396][ T4619] loop2: detected capacity change from 0 to 512 [ 55.515142][ T29] audit: type=1400 audit(1721315284.444:300): avc: denied { mount } for pid=4622 comm="syz.3.436" name="/" dev="configfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.538017][ T29] audit: type=1400 audit(1721315284.444:301): avc: denied { remount } for pid=4622 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.569321][ T4619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.581923][ T4619] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.594422][ T29] audit: type=1400 audit(1721315284.524:302): avc: denied { create } for pid=4618 comm="syz.2.435" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.600427][ T4619] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.435: corrupted inode contents [ 55.626744][ T4619] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.435: mark_inode_dirty error [ 55.638302][ T4619] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.435: corrupted inode contents [ 55.650033][ T4599] vhci_hcd: connection closed [ 55.654076][ T40] vhci_hcd: stop threads [ 55.663201][ T40] vhci_hcd: release socket [ 55.667645][ T40] vhci_hcd: disconnect device [ 55.668075][ T4619] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.435: mark_inode_dirty error [ 55.692347][ T29] audit: type=1400 audit(1721315284.624:303): avc: denied { unmount } for pid=3083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.699635][ T4630] loop4: detected capacity change from 0 to 512 [ 55.724394][ T29] audit: type=1400 audit(1721315284.654:304): avc: denied { map } for pid=4618 comm="syz.2.435" path="/16/file0/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.731456][ T4632] FAULT_INJECTION: forcing a failure. [ 55.731456][ T4632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.748527][ T29] audit: type=1400 audit(1721315284.654:305): avc: denied { execute } for pid=4618 comm="syz.2.435" path="/16/file0/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.761844][ T4632] CPU: 1 PID: 4632 Comm: syz.0.440 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 55.789573][ T4180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.795553][ T4632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 55.815584][ T4632] Call Trace: [ 55.819234][ T4632] [ 55.822328][ T4632] dump_stack_lvl+0xf2/0x150 [ 55.826916][ T4632] dump_stack+0x15/0x20 [ 55.831157][ T4632] should_fail_ex+0x229/0x230 [ 55.835849][ T4632] should_fail+0xb/0x10 [ 55.840084][ T4632] should_fail_usercopy+0x1a/0x20 [ 55.845096][ T4632] copy_fpstate_to_sigframe+0x575/0x720 [ 55.850645][ T4632] ? copy_fpstate_to_sigframe+0xde/0x720 [ 55.856277][ T4632] ? dequeue_signal+0x29f/0x430 [ 55.861143][ T4632] ? fpu__alloc_mathframe+0x95/0xd0 [ 55.866384][ T4632] get_sigframe+0x295/0x350 [ 55.871027][ T4632] x64_setup_rt_frame+0xa7/0x570 [ 55.875954][ T4632] arch_do_signal_or_restart+0x287/0x4b0 [ 55.881579][ T4632] syscall_exit_to_user_mode+0x59/0x130 [ 55.887766][ T4632] do_syscall_64+0xd6/0x1c0 [ 55.892311][ T4632] ? clear_bhb_loop+0x55/0xb0 [ 55.897007][ T4632] ? clear_bhb_loop+0x55/0xb0 [ 55.901673][ T4632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.907564][ T4632] RIP: 0033:0x7f915f785b57 [ 55.912013][ T4632] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 55.931878][ T4632] RSP: 002b:00007f915ea07048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.940363][ T4632] RAX: 0000000000000113 RBX: 00007f915f913f60 RCX: 00007f915f785b59 [ 55.948323][ T4632] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000005 [ 55.956280][ T4632] RBP: 00007f915ea070a0 R08: 0000020000000009 R09: 0000000000000000 [ 55.964310][ T4632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.972269][ T4632] R13: 000000000000000b R14: 00007f915f913f60 R15: 00007ffdba3a1768 [ 55.980252][ T4632] [ 55.990559][ T4636] loop3: detected capacity change from 0 to 512 [ 56.020506][ T4630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.033434][ T4636] EXT4-fs (loop3): too many log groups per flexible block group [ 56.041174][ T4636] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 56.050038][ T4630] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.060441][ T4636] EXT4-fs (loop3): mount failed [ 56.073524][ T4639] loop0: detected capacity change from 0 to 8192 [ 56.144132][ T4651] loop1: detected capacity change from 0 to 512 [ 56.163732][ T4651] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.444: bg 0: block 5: invalid block bitmap [ 56.179113][ T4651] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 56.197636][ T29] audit: type=1400 audit(1721315285.134:306): avc: denied { ioctl } for pid=4629 comm="syz.4.439" path="/69/bus/cpuset.effective_mems" dev="loop4" ino=19 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.223553][ T4651] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.444: invalid indirect mapped block 3 (level 2) [ 56.242480][ T4651] EXT4-fs (loop1): 1 orphan inode deleted [ 56.243725][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.248264][ T4651] EXT4-fs (loop1): 1 truncate cleaned up [ 56.279724][ T4654] loop3: detected capacity change from 0 to 8192 [ 56.316176][ T4661] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 56.322710][ T4661] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.330446][ T4661] vhci_hcd vhci_hcd.0: Device attached [ 56.481190][ T29] audit: type=1400 audit(1721315285.414:307): avc: denied { connect } for pid=4671 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.501040][ T29] audit: type=1400 audit(1721315285.414:308): avc: denied { name_connect } for pid=4671 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 56.546756][ T3161] vhci_hcd: vhci_device speed not set [ 56.560633][ T4687] loop0: detected capacity change from 0 to 512 [ 56.567611][ T4687] ext3: Unknown parameter 'hash' [ 56.626183][ T3161] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 56.665951][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 56.678606][ T4699] loop3: detected capacity change from 0 to 512 [ 56.684040][ T4700] loop0: detected capacity change from 0 to 512 [ 56.697828][ T4699] EXT4-fs (loop3): too many log groups per flexible block group [ 56.700541][ T4700] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.705556][ T4699] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 56.725338][ T4699] EXT4-fs (loop3): mount failed [ 56.848686][ T4662] vhci_hcd: connection reset by peer [ 56.854480][ T28] vhci_hcd: stop threads [ 56.859841][ T28] vhci_hcd: release socket [ 56.864483][ T28] vhci_hcd: disconnect device [ 56.894113][ T4709] loop2: detected capacity change from 0 to 8192 [ 57.048794][ T4714] loop1: detected capacity change from 0 to 8192 [ 57.227584][ T4717] loop2: detected capacity change from 0 to 8192 [ 57.392459][ T4739] loop1: detected capacity change from 0 to 512 [ 57.408334][ T4739] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.449472][ T4744] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 57.456284][ T4744] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.464010][ T4744] vhci_hcd vhci_hcd.0: Device attached [ 57.497109][ T4750] loop2: detected capacity change from 0 to 512 [ 57.509410][ T4750] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.472: bg 0: block 5: invalid block bitmap [ 57.524604][ T4750] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 57.527939][ T4753] loop3: detected capacity change from 0 to 512 [ 57.533753][ T4750] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.472: invalid indirect mapped block 3 (level 2) [ 57.541029][ T4753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.560704][ T4750] EXT4-fs (loop2): 1 orphan inode deleted [ 57.566513][ T4750] EXT4-fs (loop2): 1 truncate cleaned up [ 57.577363][ T4753] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.666205][ T9] vhci_hcd: vhci_device speed not set [ 57.671969][ T4766] loop0: detected capacity change from 0 to 8192 [ 57.698632][ T4771] loop3: detected capacity change from 0 to 512 [ 57.717685][ T4771] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.736831][ T9] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 57.972341][ T4745] vhci_hcd: connection reset by peer [ 57.983529][ T28] vhci_hcd: stop threads [ 57.987855][ T28] vhci_hcd: release socket [ 57.992291][ T28] vhci_hcd: disconnect device [ 58.142474][ T4779] loop1: detected capacity change from 0 to 8192 [ 58.158032][ T4783] __nla_validate_parse: 17 callbacks suppressed [ 58.158046][ T4783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 58.350531][ T4783] loop0: detected capacity change from 0 to 8192 [ 58.633042][ T4807] netlink: 52 bytes leftover after parsing attributes in process `syz.0.493'. [ 58.639314][ T4809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'. [ 58.655904][ T4807] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 58.663624][ T4807] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 58.674159][ T4807] vhci_hcd vhci_hcd.0: Device attached [ 58.691958][ T4807] netlink: 6 bytes leftover after parsing attributes in process `syz.0.493'. [ 58.708762][ T4809] loop3: detected capacity change from 0 to 8192 [ 58.718541][ T4815] loop2: detected capacity change from 0 to 512 [ 58.730885][ T4815] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 58.741676][ T4815] EXT4-fs (loop2): invalid journal inode [ 58.749320][ T4815] EXT4-fs (loop2): can't get journal size [ 58.757770][ T4815] EXT4-fs (loop2): 1 truncate cleaned up [ 58.796038][ T4813] loop1: detected capacity change from 0 to 8192 [ 59.065578][ T4833] loop3: detected capacity change from 0 to 512 [ 59.078603][ T4833] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.499: bg 0: block 5: invalid block bitmap [ 59.095308][ T4833] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 59.104461][ T4833] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.499: invalid indirect mapped block 3 (level 2) [ 59.112527][ T4822] chnl_net:caif_netlink_parms(): no params data found [ 59.118922][ T4833] EXT4-fs (loop3): 1 orphan inode deleted [ 59.132597][ T4833] EXT4-fs (loop3): 1 truncate cleaned up [ 59.145580][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.196327][ T3163] usb 9-1: enqueue for inactive port 0 [ 59.198846][ T4840] loop1: detected capacity change from 0 to 164 [ 59.202437][ T3163] usb 9-1: enqueue for inactive port 0 [ 59.214807][ T4810] vhci_hcd: connection closed [ 59.216347][ T40] vhci_hcd: stop threads [ 59.225614][ T40] vhci_hcd: release socket [ 59.230601][ T40] vhci_hcd: disconnect device [ 59.235134][ T4844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.501'. [ 59.245281][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.252471][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.268931][ T4822] bridge_slave_0: entered allmulticast mode [ 59.283110][ T4822] bridge_slave_0: entered promiscuous mode [ 59.289371][ T3163] vhci_hcd: vhci_device speed not set [ 59.302978][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.310832][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.313006][ T4844] loop0: detected capacity change from 0 to 8192 [ 59.326452][ T4822] bridge_slave_1: entered allmulticast mode [ 59.333370][ T4822] bridge_slave_1: entered promiscuous mode [ 59.345877][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.373383][ T4847] loop1: detected capacity change from 0 to 8192 [ 59.395117][ T4822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.413417][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.427738][ T4822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.459993][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.487739][ T4822] team0: Port device team_slave_0 added [ 59.558177][ T4822] team0: Port device team_slave_1 added [ 59.627024][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.634110][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.660577][ T4822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.683521][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.690626][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.718491][ T4822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.827005][ T4822] hsr_slave_0: entered promiscuous mode [ 59.846507][ T4822] hsr_slave_1: entered promiscuous mode [ 59.879386][ T4822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.898251][ T4822] Cannot create hsr debugfs directory [ 59.911187][ T11] bridge_slave_1: left allmulticast mode [ 59.917286][ T11] bridge_slave_1: left promiscuous mode [ 59.923099][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.973309][ T11] bridge_slave_0: left allmulticast mode [ 59.979060][ T11] bridge_slave_0: left promiscuous mode [ 59.984735][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.123605][ T4865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.169053][ T4872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 60.237923][ T4865] loop3: detected capacity change from 0 to 512 [ 60.291259][ T4865] EXT4-fs (loop3): too many log groups per flexible block group [ 60.299701][ T4865] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 60.306975][ T4865] EXT4-fs (loop3): mount failed [ 60.317917][ T4878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'. [ 60.349428][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.366503][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.379683][ T4878] loop0: detected capacity change from 0 to 8192 [ 60.391376][ T11] bond0 (unregistering): Released all slaves [ 60.407470][ T4884] loop3: detected capacity change from 0 to 512 [ 60.529026][ T11] hsr_slave_0: left promiscuous mode [ 60.547303][ T4896] loop4: detected capacity change from 0 to 512 [ 60.555043][ T11] hsr_slave_1: left promiscuous mode [ 60.562569][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.562762][ T4888] loop3: detected capacity change from 0 to 8192 [ 60.571503][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.594263][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.601778][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.617693][ T4896] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.515: bg 0: block 5: invalid block bitmap [ 60.638565][ T4896] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 60.650126][ T11] veth1_macvtap: left promiscuous mode [ 60.655694][ T11] veth0_macvtap: left promiscuous mode [ 60.661245][ T11] veth1_vlan: left promiscuous mode [ 60.666551][ T11] veth0_vlan: left promiscuous mode [ 60.676263][ T4896] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.515: invalid indirect mapped block 3 (level 2) [ 60.693115][ T4896] EXT4-fs (loop4): 1 orphan inode deleted [ 60.699109][ T4896] EXT4-fs (loop4): 1 truncate cleaned up [ 60.796246][ T11] team0 (unregistering): Port device team_slave_1 removed [ 60.808909][ T11] team0 (unregistering): Port device team_slave_0 removed [ 60.948190][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 60.948203][ T29] audit: type=1400 audit(1721315289.884:320): avc: denied { create } for pid=4915 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.977686][ T29] audit: type=1400 audit(1721315289.914:321): avc: denied { write } for pid=4915 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.122353][ T4932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.132998][ T4946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'. [ 61.145834][ T29] audit: type=1400 audit(1721315290.074:322): avc: denied { getopt } for pid=4915 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.206508][ T4932] loop1: detected capacity change from 0 to 512 [ 61.213959][ T40] nci: nci_ntf_packet: unknown ntf opcode 0x100 [ 61.214397][ T4925] loop0: detected capacity change from 0 to 128 [ 61.284481][ T4932] EXT4-fs (loop1): too many log groups per flexible block group [ 61.292313][ T4932] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 61.326632][ T4932] EXT4-fs (loop1): mount failed [ 61.590054][ T4968] netlink: 'syz.1.524': attribute type 16 has an invalid length. [ 61.597933][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 61.681351][ T4968] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 61.687897][ T4968] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.694755][ T3161] usb 5-1: enqueue for inactive port 0 [ 61.695549][ T4968] vhci_hcd vhci_hcd.0: Device attached [ 61.720750][ T3161] usb 5-1: enqueue for inactive port 0 [ 61.775733][ T4822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.816297][ T3161] vhci_hcd: vhci_device speed not set [ 61.840263][ T4822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.890041][ T4822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.908740][ T4822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.908947][ T4989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'. [ 62.001053][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.035074][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.056975][ T4997] loop3: detected capacity change from 0 to 8192 [ 62.059005][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.070575][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.101466][ T4822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.112014][ T4822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.125695][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.132804][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.193503][ T5013] loop0: detected capacity change from 0 to 512 [ 62.220300][ T5013] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.531: bg 0: block 5: invalid block bitmap [ 62.220904][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.270176][ T5013] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 62.279455][ T4971] vhci_hcd: connection closed [ 62.279710][ T58] vhci_hcd: stop threads [ 62.288842][ T58] vhci_hcd: release socket [ 62.293318][ T58] vhci_hcd: disconnect device [ 62.316682][ T5013] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.531: invalid indirect mapped block 3 (level 2) [ 62.330738][ T5013] EXT4-fs (loop0): 1 orphan inode deleted [ 62.336565][ T5013] EXT4-fs (loop0): 1 truncate cleaned up [ 62.389217][ T5026] loop1: detected capacity change from 0 to 8192 [ 62.429526][ T4822] veth0_vlan: entered promiscuous mode [ 62.441834][ T4822] veth1_vlan: entered promiscuous mode [ 62.470979][ T4822] veth0_macvtap: entered promiscuous mode [ 62.479639][ T4822] veth1_macvtap: entered promiscuous mode [ 62.501038][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.511905][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.521820][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.532367][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.542275][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.553050][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.563001][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.573514][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.585147][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.593864][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.604755][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.614866][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.626798][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.638230][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.648761][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.658607][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.669147][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.680960][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.715223][ T4822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.724572][ T4822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.733631][ T4822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.742818][ T4822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.809413][ T9] usb 3-1: enqueue for inactive port 0 [ 62.815082][ T9] usb 3-1: enqueue for inactive port 0 [ 62.860512][ T5055] loop1: detected capacity change from 0 to 512 [ 62.883984][ T29] audit: type=1400 audit(1721315291.814:323): avc: denied { mount } for pid=4822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.907179][ T5055] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 62.928255][ T9] vhci_hcd: vhci_device speed not set [ 62.957926][ T5055] EXT4-fs (loop1): invalid journal inode [ 62.963713][ T5055] EXT4-fs (loop1): can't get journal size [ 62.988105][ T5055] EXT4-fs (loop1): 1 truncate cleaned up [ 63.042576][ T5057] loop4: detected capacity change from 0 to 8192 [ 63.113387][ T29] audit: type=1400 audit(1721315292.044:324): avc: denied { write } for pid=5065 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.133023][ T29] audit: type=1400 audit(1721315292.044:325): avc: denied { name_connect } for pid=5065 comm="syz.0.543" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.169382][ T5067] __nla_validate_parse: 3 callbacks suppressed [ 63.169437][ T5067] netlink: 9 bytes leftover after parsing attributes in process `syz.0.543'. [ 63.283337][ T5075] netlink: 277 bytes leftover after parsing attributes in process `syz.1.546'. [ 63.304949][ T5064] loop2: detected capacity change from 0 to 8192 [ 63.355427][ T5079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 63.491189][ T5079] loop1: detected capacity change from 0 to 8192 [ 63.500154][ T5093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.551'. [ 63.674133][ T5099] loop0: detected capacity change from 0 to 512 [ 63.685540][ T5099] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.553: bg 0: block 5: invalid block bitmap [ 63.699295][ T5099] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 63.714534][ T5099] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.553: invalid indirect mapped block 3 (level 2) [ 63.744348][ T5099] EXT4-fs (loop0): 1 orphan inode deleted [ 63.750142][ T5099] EXT4-fs (loop0): 1 truncate cleaned up [ 63.812013][ T5111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.556'. [ 63.841352][ T29] audit: type=1400 audit(1721315292.774:326): avc: denied { write } for pid=5108 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.874131][ T29] audit: type=1400 audit(1721315292.804:327): avc: denied { connect } for pid=5108 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.885959][ T5111] loop4: detected capacity change from 0 to 8192 [ 63.893759][ T29] audit: type=1400 audit(1721315292.804:328): avc: denied { write } for pid=5108 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.005620][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 64.005669][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 64.031655][ T5128] loop2: detected capacity change from 0 to 512 [ 64.050213][ T5128] EXT4-fs (loop2): too many log groups per flexible block group [ 64.055658][ T5133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.562'. [ 64.057932][ T5128] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 64.073932][ T5128] EXT4-fs (loop2): mount failed [ 64.125496][ T5133] loop1: detected capacity change from 0 to 8192 [ 64.333507][ T5141] loop4: detected capacity change from 0 to 8192 [ 64.343992][ T29] audit: type=1326 audit(1721315293.274:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5142 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613ff65b59 code=0x7ffc0000 [ 64.516356][ T5152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.569'. [ 64.566937][ T5152] loop0: detected capacity change from 0 to 8192 [ 64.603518][ T5154] capability: warning: `syz.4.570' uses deprecated v2 capabilities in a way that may be insecure [ 64.697291][ T5157] vhci_hcd: invalid port number 224 [ 64.702524][ T5157] vhci_hcd: default hub control req: 2330 v0018 i00e0 l0 [ 64.758477][ T5166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 64.812430][ T5172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.574'. [ 64.835361][ T5166] loop0: detected capacity change from 0 to 8192 [ 64.908301][ T5172] loop4: detected capacity change from 0 to 8192 [ 64.916258][ T5179] loop2: detected capacity change from 0 to 512 [ 64.929004][ T5179] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.579: bg 0: block 5: invalid block bitmap [ 64.959137][ T5184] loop1: detected capacity change from 0 to 8192 [ 64.971393][ T5179] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 64.982565][ T5179] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.579: invalid indirect mapped block 3 (level 2) [ 65.000634][ T5179] EXT4-fs (loop2): 1 orphan inode deleted [ 65.006489][ T5179] EXT4-fs (loop2): 1 truncate cleaned up [ 65.312437][ T5191] loop0: detected capacity change from 0 to 8192 [ 65.421480][ T5209] random: crng reseeded on system resumption [ 65.472933][ T5191] ================================================================== [ 65.481065][ T5191] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 65.489685][ T5191] [ 65.492008][ T5191] write to 0xffff88810576c260 of 8 bytes by task 5201 on cpu 1: [ 65.499737][ T5191] sync_mapping_buffers+0x162/0x7e0 [ 65.505045][ T5191] fat_file_fsync+0xad/0x100 [ 65.509651][ T5191] vfs_fsync_range+0x122/0x140 [ 65.514485][ T5191] generic_file_write_iter+0x191/0x1d0 [ 65.520051][ T5191] iter_file_splice_write+0x5e6/0x970 [ 65.525504][ T5191] direct_splice_actor+0x16c/0x2c0 [ 65.530725][ T5191] splice_direct_to_actor+0x305/0x670 [ 65.536115][ T5191] do_splice_direct+0xd7/0x150 [ 65.541203][ T5191] do_sendfile+0x3ab/0x950 [ 65.545748][ T5191] __x64_sys_sendfile64+0xbd/0x150 [ 65.550872][ T5191] x64_sys_call+0xed5/0x2d60 [ 65.555892][ T5191] do_syscall_64+0xc9/0x1c0 [ 65.560385][ T5191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.566288][ T5191] [ 65.568602][ T5191] read to 0xffff88810576c260 of 8 bytes by task 5191 on cpu 0: [ 65.576150][ T5191] mark_buffer_dirty_inode+0x96/0x1c0 [ 65.581699][ T5191] fat16_ent_put+0x4f/0x60 [ 65.586114][ T5191] fat_ent_write+0x66/0xe0 [ 65.590538][ T5191] fat_chain_add+0x15f/0x400 [ 65.595125][ T5191] fat_get_block+0x46b/0x5e0 [ 65.599742][ T5191] __block_write_begin_int+0x417/0xfa0 [ 65.605228][ T5191] block_write_begin+0x7b/0x170 [ 65.610078][ T5191] cont_write_begin+0x486/0x6b0 [ 65.615010][ T5191] fat_write_begin+0x61/0xf0 [ 65.619596][ T5191] generic_perform_write+0x1d5/0x410 [ 65.624976][ T5191] __generic_file_write_iter+0xa1/0x120 [ 65.630520][ T5191] generic_file_write_iter+0x7d/0x1d0 [ 65.635892][ T5191] vfs_write+0x78f/0x900 [ 65.640218][ T5191] ksys_write+0xeb/0x1b0 [ 65.644553][ T5191] __x64_sys_write+0x42/0x50 [ 65.649149][ T5191] x64_sys_call+0x27dd/0x2d60 [ 65.654000][ T5191] do_syscall_64+0xc9/0x1c0 [ 65.658490][ T5191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.664380][ T5191] [ 65.666687][ T5191] value changed: 0xffff888106ce0808 -> 0x0000000000000000 [ 65.673780][ T5191] [ 65.676095][ T5191] Reported by Kernel Concurrency Sanitizer on: [ 65.682333][ T5191] CPU: 0 PID: 5191 Comm: syz.0.581 Not tainted 6.10.0-syzkaller-05505-gb1bc554e009e #0 [ 65.692035][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 65.702298][ T5191] ================================================================== [ 65.711761][ T58] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 65.726530][ T5214] loop4: detected capacity change from 0 to 512 [ 65.752470][ T5214] EXT4-fs (loop4): too many log groups per flexible block group [ 65.760263][ T5214] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 65.780447][ T5214] EXT4-fs (loop4): mount failed [ 65.787128][ T4822] EXT4-fs unmount: 25 callbacks suppressed [ 65.787140][ T4822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.