last executing test programs: 801.319327ms ago: executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}, @rthdr={{0x18}}], 0x40}}], 0x2, 0x0) 774.581051ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x17a, &(0x7f0000000380)={@link_local, @remote, @void, {@ipv4={0x800, @generic={{0x2a, 0x4, 0x3, 0x7, 0x16c, 0x66, 0x0, 0x8, 0xc, 0x0, @remote, @empty, {[@timestamp={0x44, 0x1c, 0x67, 0x0, 0xf, [0x8, 0x2, 0x400, 0xb18, 0x6, 0x9c18]}, @ssrr={0x89, 0x1b, 0x6b, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x2b, 0xaf, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010102, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xca, 0x0, 0x7, [0x6163, 0x7, 0x0]}, @rr={0x7, 0x1b, 0x8b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @private=0xa010100, @private=0xa010100, @empty]}]}}, "f57b1010dc5d80996105aa1a0ea0cb09431e84d789ab603ce2632aa12ba643f5422076a953cc579faea2773e36414f54dc442c9014a0246a2eac15edba67d27a25c613d29c6ca78714af46e09acfbe726ccf7307a0987b64aad643f2370df7b58283d36630fad79611ef3a23a0bdc6fb4edcaf71b8b9ce3c28595837c7c0848055f3d271d04a127c0aa4ea8e5af46a8973b9704bdc5a9a450ed789b5495c47cea916268894c0ddd5b6dfbdf851d1cd7b1a2edcb159837153e1a578d19bf792ed81e7b988"}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400080, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r1}, 0x18) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00%\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="200001", @ANYRES32=r4, @ANYBLOB="000000007f00000122000000000000000000000086dd"], 0x38}, 0x1, 0xf00}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf3}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x20004000) clock_gettime(0x0, &(0x7f0000000280)) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2, 0x1d, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x16}]}) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 569.768063ms ago: executing program 2: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) 562.728344ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 500.937313ms ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7ffc2001}]}) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000eb0f2e3e52311d8b6af23239f6cd7ba3dc6de2beb68527285d50899daa4e56e90ac7842f597969e67964e75a054f13055f0e51de2f2926bf6bd31f943faf53238eebeba91b4efe415e00e6f7afd58109b2374d34cf58144f1d54e26ff970ba38db11a1ea015fbccf6f9112125c91f2ae1ee88281ea0615376c4b275d04d86058c92ed1656a4ef04b41ff7a", @ANYRES16=r6, @ANYBLOB="000400000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="14005e8008000200000000000800010000000000"], 0x30}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={0x0}) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f0000000100)=@tcp=r8, 0x3}, 0x20) sendfile(r0, r0, 0x0, 0x24002de8) fallocate(0xffffffffffffffff, 0x14, 0x0, 0x1002) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000140)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x1, 0x7]}) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 479.675146ms ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output]}, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 419.531716ms ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 296.543994ms ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_BMAP(r4, &(0x7f0000000500)={0x18}, 0x18) write$FUSE_POLL(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYRES32=r3], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x8, 0x0) 267.907179ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2301, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 258.7376ms ago: executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffe00}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x4004551e, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x5514, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xfffd}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) request_key(0x0, &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000380)='G@\xf7\xff\xff\xff\xff\xff\xff\xff\xe3h;\x1d\xd3\xaa\x1a\x9c\xca+\xa2\f\xec\xdeq\xc8\xa2\xc0\xfb\xe7\x98\xa8\x94%\xeb8\xdc\xaf\x02\xe8\xb9g\xd9.k\\q5d\x7f\xaf\xa4\xacsl\xda\x8b\xfb\xdb\xde!\xe2@@G\vT\xa98\f\x1c\xc7D\x8b\xb3@\x96Z2\x1e\x13\x89\x80\xbf\x9f4\x17\xa8\xdd1\n\x05\x953\xd8)<\xcch{\xb3\xeed\xd2Kb\xf1\xdb<,]\x85\xd9}\xa9\xcdhz\xa7\xc5\x14\x8d\xe9R.\x7f\xa3\x9drc\x17\xa1\xe8\xae\x92\x92s\xc1\x98;\x04\xed\xd3\xf6:$n\x14V\xe7\x1c;\x15s\xb9\x82\xc1\fTP\xe5@\x86H\xdf\x93aB\xf2a&\x9c\tsV\"*\xc5\xa3\x0e(\xa6\b\xde\x19\xe8\xd1e\x01u?\xf9', 0xfffffffffffffffa) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 251.631771ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) getdents64(r0, 0x0, 0x0) 216.652167ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, 0x0, r0, &(0x7f0000000200)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14553e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 65.24921ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) 44.617243ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 0s ago: executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0x71) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x7, 0xfffffffa}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. 2024/06/24 15:19:03 fuzzer started 2024/06/24 15:19:03 dialing manager at 10.128.0.163:30008 [ 19.258075][ T30] audit: type=1400 audit(1719242343.601:66): avc: denied { node_bind } for pid=281 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 19.261448][ T30] audit: type=1400 audit(1719242343.601:67): avc: denied { name_bind } for pid=281 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 19.290542][ T30] audit: type=1400 audit(1719242343.631:68): avc: denied { integrity } for pid=291 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 19.299761][ T291] cgroup: Unknown subsys name 'net' [ 19.322783][ T291] cgroup: Unknown subsys name 'devices' [ 19.327599][ T30] audit: type=1400 audit(1719242343.641:69): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.350723][ T30] audit: type=1400 audit(1719242343.641:70): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.354736][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.373078][ T30] audit: type=1400 audit(1719242343.661:71): avc: denied { mounton } for pid=295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.405636][ T30] audit: type=1400 audit(1719242343.661:72): avc: denied { mount } for pid=295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.410405][ T292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.428780][ T30] audit: type=1400 audit(1719242343.661:73): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.456664][ T30] audit: type=1400 audit(1719242343.681:74): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.479556][ T30] audit: type=1400 audit(1719242343.731:75): avc: denied { relabelto } for pid=293 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.658159][ T291] cgroup: Unknown subsys name 'hugetlb' [ 19.663599][ T291] cgroup: Unknown subsys name 'rlimit' 2024/06/24 15:19:04 starting 5 executor processes [ 21.375234][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.382184][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.389443][ T311] device bridge_slave_0 entered promiscuous mode [ 21.396096][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.403013][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.410119][ T311] device bridge_slave_1 entered promiscuous mode [ 21.420648][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.427522][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.434578][ T308] device bridge_slave_0 entered promiscuous mode [ 21.458385][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.465230][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.472487][ T308] device bridge_slave_1 entered promiscuous mode [ 21.519167][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.526016][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.533298][ T310] device bridge_slave_0 entered promiscuous mode [ 21.548631][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.555465][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.562700][ T312] device bridge_slave_0 entered promiscuous mode [ 21.571983][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.578918][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.585904][ T310] device bridge_slave_1 entered promiscuous mode [ 21.598033][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.604866][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.612048][ T312] device bridge_slave_1 entered promiscuous mode [ 21.679232][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.686065][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.693313][ T309] device bridge_slave_0 entered promiscuous mode [ 21.702208][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.709182][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.716224][ T309] device bridge_slave_1 entered promiscuous mode [ 21.793053][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.799926][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.807013][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.813782][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.841949][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.848809][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.855867][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.862706][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.872849][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.879707][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.886786][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.893571][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.928896][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.935939][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.943027][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.951057][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.959096][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.966005][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.973704][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.981497][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.032275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.047734][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.055310][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.063370][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.070208][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.077500][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.085383][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.092153][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.099564][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.106794][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.113926][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.121141][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.129027][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.135763][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.143060][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.151437][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.158908][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.166819][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.173632][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.198228][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.206113][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.214612][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.223273][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.230210][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.237340][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.245143][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.251901][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.259019][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.266708][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.274390][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.282355][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.289187][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.310839][ T308] device veth0_vlan entered promiscuous mode [ 22.323056][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.331018][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.338720][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.345852][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.353937][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.361687][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.369586][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.376310][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.383514][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.391222][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.398966][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.406629][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.414155][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.428814][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.436952][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.445021][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.453184][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.462423][ T309] device veth0_vlan entered promiscuous mode [ 22.471274][ T308] device veth1_macvtap entered promiscuous mode [ 22.478183][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.486096][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.494077][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.502038][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.510038][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.517654][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.524875][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.536170][ T311] device veth0_vlan entered promiscuous mode [ 22.546871][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.554568][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.562377][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.570078][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.581936][ T310] device veth0_vlan entered promiscuous mode [ 22.591596][ T309] device veth1_macvtap entered promiscuous mode [ 22.598477][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.606786][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.614839][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.623285][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.631326][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.639370][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.647443][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.655066][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.662897][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.670835][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.678833][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.686178][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.693479][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.711174][ T311] device veth1_macvtap entered promiscuous mode [ 22.718129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.726271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.734800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.742778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.750942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.760959][ T310] device veth1_macvtap entered promiscuous mode [ 22.771226][ T312] device veth0_vlan entered promiscuous mode [ 22.782779][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.792411][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.803004][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.810561][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.818407][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.826503][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.833715][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.853557][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.861587][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.869731][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.877920][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.885926][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.894016][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.902084][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.910143][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.918181][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.926102][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.934279][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.942227][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.968383][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.976682][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.987153][ T312] device veth1_macvtap entered promiscuous mode [ 23.013884][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.022126][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.045697][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.076385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.086281][ T351] loop7: detected capacity change from 0 to 16384 [ 23.093471][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.207135][ T43] blk_update_request: I/O error, dev loop7, sector 4312 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 23.218423][ T43] Buffer I/O error on dev loop7, logical block 539, lost async page write [ 23.226882][ T43] blk_update_request: I/O error, dev loop7, sector 4320 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 23.238116][ T43] Buffer I/O error on dev loop7, logical block 540, lost async page write [ 23.248813][ T43] blk_update_request: I/O error, dev loop7, sector 4328 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 23.260112][ T43] Buffer I/O error on dev loop7, logical block 541, lost async page write [ 23.276562][ T330] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 23.279656][ T43] blk_update_request: I/O error, dev loop7, sector 4336 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 23.295097][ T43] Buffer I/O error on dev loop7, logical block 542, lost async page write [ 23.361286][ T371] loop0: detected capacity change from 0 to 512 [ 23.405346][ T371] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 23.419845][ T371] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 23.432849][ T371] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 23.449329][ T371] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 23.463220][ T371] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 23.476189][ T371] EXT4-fs (loop0): 1 orphan inode deleted [ 23.482021][ T371] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 23.527260][ T312] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 23.548601][ T312] ------------[ cut here ]------------ [ 23.553913][ T312] kernel BUG at fs/namei.c:2933! [ 23.558867][ T312] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 23.564741][ T312] CPU: 1 PID: 312 Comm: syz-executor.0 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 2024/06/24 15:19:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 23.574722][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 23.584628][ T312] RIP: 0010:may_delete+0x6eb/0x6f0 [ 23.589567][ T312] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 46 74 f4 ff e9 72 fe ff ff e8 ac 3a b2 ff 0f 0b e8 a5 3a b2 ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 91 3a b2 ff 4c 8d [ 23.609008][ T312] RSP: 0018:ffffc90000b47c70 EFLAGS: 00010293 [ 23.614908][ T312] RAX: ffffffff81bdfcfb RBX: ffff88811c621e00 RCX: ffff888121ae3b40 [ 23.622719][ T312] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 23.630620][ T312] RBP: ffffc90000b47cd8 R08: ffffffff81bdf68f R09: 0000000000000003 [ 23.638429][ T312] R10: fffff52000168f70 R11: dffffc0000000001 R12: ffff88811c7e5330 [ 23.646238][ T312] R13: 1ffff110238fca66 R14: ffff88811c5498b8 R15: dffffc0000000000 [ 23.654051][ T312] FS: 00005555572f8480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 23.662815][ T312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.669327][ T312] CR2: 0000555557309858 CR3: 000000010dcc7000 CR4: 00000000003506a0 [ 23.677139][ T312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.684949][ T312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.692763][ T312] Call Trace: [ 23.695884][ T312] [ 23.698661][ T312] ? __die_body+0x62/0xb0 [ 23.702828][ T312] ? die+0x88/0xb0 [ 23.706388][ T312] ? do_trap+0x103/0x330 [ 23.710470][ T312] ? may_delete+0x6eb/0x6f0 [ 23.714806][ T312] ? handle_invalid_op+0x95/0xc0 [ 23.719577][ T312] ? may_delete+0x6eb/0x6f0 [ 23.723920][ T312] ? exc_invalid_op+0x32/0x50