last executing test programs: 3.358925635s ago: executing program 2 (id=170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b00)={[{@nojournal_checksum}, {@nombcache}, {@errors_remount}, {@norecovery}, {@abort}, {@journal_checksum}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x2}}, {@noauto_da_alloc}, {@block_validity}, {@block_validity}, {@data_ordered}, {@nouid32}], [{@context={'context', 0x3d, 'staff_u'}}, {@euid_gt}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/dev/ppp\x00'}}, {@subj_user}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0xfa, 0x571, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007f40)=ANY=[], 0x78}}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000000600010000000000000000000000000a20000000000a0108000000000000000001000000090b010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000018000540000000211c0011800a0001006c696d69740000000c0002800800044000000001140000001000010000000000000000000000000a"], 0xa0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000080)=[{0x2d}, {0x16}]}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000480)='GPL\x00'}, 0x90) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1f}}, 0x1c) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRES32=r1, @ANYRESHEX=r4, @ANYBLOB="2c5ae69e145cc815d332369fbe09f12817b5cb497566fdfffba9e311475fca0e33ccda2c74fd4af3be4296bb479665ac1757a3a4ec04fac050698f99579815000000000000"]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket(0x22, 0x2, 0x11) bind$bt_hci(r5, &(0x7f0000000000), 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xcc820, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r7, 0x4010744d, 0x20000000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x84, "6eee6e425e468216da3c5b14e3a099b74495e259f56bc2067fa9dac9afb8b2b9f65f30e2340f89010079cc56aca59a1f0ba8610d72dbb911dfa12adee62d7cb10db5afe25ae9d845eea65db15ef802b4489a7ee1afd78528c3ce2151268fad104f027d39ebfef81f71eeb7c47884682b16690ed182704bdeb79b9c6236adc821a8b843f1"}, &(0x7f00000000c0)=0x8c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r8, 0x764e}, 0x8) socket$packet(0x11, 0x3, 0x300) 2.462923518s ago: executing program 2 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52004507000010000000d60600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c196738b5f32b095f5d5b996b9e8d897e461c01c697671d1000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r2, &(0x7f0000000080)=""/255, 0x18) getdents(r2, &(0x7f0000001440)=""/228, 0xe4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r3, &(0x7f0000000080)=""/255, 0x18) getdents(r3, &(0x7f0000001440)=""/228, 0xe4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000005000000a700000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000800)=""/173, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0xf3, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x1, 0x56, 0x40}, 0x10, 0x0, r2, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0x1, r3, 0x1]}, 0x80) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000400)) r4 = dup(r1) creat(&(0x7f0000000380)='./file0\x00', 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2, &(0x7f0000000040)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @local}}}, 0x108) r5 = socket(0x10, 0x803, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r6, &(0x7f0000000080)=""/255, 0x18) getdents(r6, &(0x7f0000001440)=""/228, 0xe4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002bbd7000fbdbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0f0000000000000400cc00"], 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x40, 0x2}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580), 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000014002101feffffff0000000002000000", @ANYRES32=r12, @ANYBLOB="080002006401210119d201864178fe41edf092776ff1c55956fa05e69f204ee3c2019aec281995e401fba0c07a70c3d5817b6d2d19a61afa4b00971ebc8b8cd6091f26d0afd94a996133ece6c1596565ba8b8f02fbdf491bc68c9bff3235c39094d97d67e27e87962a0ae167f065b615fce7b76ac1cf1cf1e42ffafa3c8b849f453414f2bd770ec85cdfb2619aa80c1b38502377bfea4a3fbece326d5beea4d601232b1e0e94bd3f48083460c026a698b8f138ece59699f71eb457e946b921100f6df9938917ab98ca6123b4ff1f56"], 0x20}}, 0x20040000) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x75c7c04b07bf3cec, 0x0, 0x0, r8}, [@IFA_LABEL={0x14, 0x3, 'vlan0\x00'}]}, 0x2c}}, 0x0) 2.361531107s ago: executing program 2 (id=180): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f000001a080)={0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0}) 2.286804223s ago: executing program 2 (id=183): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.375189627s ago: executing program 2 (id=195): syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') r0 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r0, 0x1) r1 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x5, 0x0) setgid(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x59, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 1.34114143s ago: executing program 1 (id=197): socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r2) accept4$tipc(r1, 0x0, 0x0, 0x0) 1.277261645s ago: executing program 1 (id=199): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x3a, 0xcc, 0x0, 0x0) 1.263933906s ago: executing program 1 (id=200): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, @in=@remote}}, 0xf0}}, 0x0) 1.252012318s ago: executing program 1 (id=201): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 1.165771945s ago: executing program 1 (id=203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@errors_continue}, {@abort}, {@usrjquota}, {@norecovery}, {@minixdf}, {@nombcache}, {@noquota}, {@norecovery}, {@noload}, {@user_xattr}]}, 0x1, 0x476, &(0x7f0000000700)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="610301032e19d5e1ad9c"], 0xa) 1.041839665s ago: executing program 0 (id=206): socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@barrier}]}, 0x0, 0x523, &(0x7f0000000a80)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000cc0)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYRESOCT=r4, @ANYBLOB="44fd001bb33932b2e3c41b17501baeb33b2fe1d7c88a78d3304f50a10d01f5e3af59adfc0be770b8", @ANYRES32=r2], 0x0) 700.787843ms ago: executing program 3 (id=214): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8, &(0x7f00000001c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0xa}}, {@commit={'commit', 0x3d, 0xa}}, {@noblock_validity}, {@data_journal}, {@norecovery}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x81, 0x5, 0x3, 0x0, 0xff, 0x22, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40000000, 0x2, @perf_bp={&(0x7f0000000380), 0xeecf55365371b90a}, 0xdaa9075969c7f323, 0x101, 0xfffffffc, 0x8, 0x9, 0xc, 0x2, 0x0, 0xcf23, 0x0, 0x718}, 0x0, 0x3, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030300000000000000000a0600002800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007663616e3000000000000000000000000c000180080003000000000014000280080001"], 0x5c}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d4794676c65000000000000000400"/29], &(0x7f0000000180)=0x2c) socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x120) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000040)='.\x00', 0xa) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r8, r9, 0x0) r10 = io_uring_setup(0x20ae, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x1}) close_range(r10, 0xffffffffffffffff, 0x0) readv(r9, &(0x7f0000000400)=[{&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/27, 0x1b}], 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000180080006"], 0x24}}, 0x0) 652.844747ms ago: executing program 4 (id=216): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) bpf$MAP_LOOKUP_ELEM(0xd, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711229000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8b30, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000937fed), &(0x7f0000000000)=0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 620.288179ms ago: executing program 4 (id=217): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x4b4d, &(0x7f0000001900)) 610.08351ms ago: executing program 4 (id=218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 550.794505ms ago: executing program 4 (id=219): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x4400) 531.243016ms ago: executing program 2 (id=220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b00)={[{@nojournal_checksum}, {@nombcache}, {@errors_remount}, {@norecovery}, {@abort}, {@journal_checksum}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x2}}, {@noauto_da_alloc}, {@block_validity}, {@block_validity}, {@data_ordered}, {@nouid32}], [{@context={'context', 0x3d, 'staff_u'}}, {@euid_gt}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/dev/ppp\x00'}}, {@subj_user}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0xfa, 0x571, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007f40)=ANY=[], 0x78}}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000000600010000000000000000000000000a20000000000a0108000000000000000001000000090b010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000018000540000000211c0011800a0001006c696d69740000000c0002800800044000000001140000001000010000000000000000000000000a"], 0xa0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000080)=[{0x2d}, {0x16}]}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000480)='GPL\x00'}, 0x90) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1f}}, 0x1c) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRES32=r1, @ANYRESHEX=r4, @ANYBLOB="2c5ae69e145cc815d332369fbe09f12817b5cb497566fdfffba9e311475fca0e33ccda2c74fd4af3be4296bb479665ac1757a3a4ec04fac050698f99579815000000000000"]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket(0x22, 0x2, 0x11) bind$bt_hci(r5, &(0x7f0000000000), 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xcc820, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r7, 0x4010744d, 0x20000000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x84, "6eee6e425e468216da3c5b14e3a099b74495e259f56bc2067fa9dac9afb8b2b9f65f30e2340f89010079cc56aca59a1f0ba8610d72dbb911dfa12adee62d7cb10db5afe25ae9d845eea65db15ef802b4489a7ee1afd78528c3ce2151268fad104f027d39ebfef81f71eeb7c47884682b16690ed182704bdeb79b9c6236adc821a8b843f1"}, &(0x7f00000000c0)=0x8c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r8, 0x764e}, 0x8) socket$packet(0x11, 0x3, 0x300) 482.399871ms ago: executing program 4 (id=221): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 468.750072ms ago: executing program 4 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x40440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001500000020002b8008000100030000000c0005020000000000000000050002000000000008000300", @ANYRES32], 0x44}}, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x8915, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) setpgid(0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0x1}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7, '\x00', r5, r6, 0x2, 0x1, 0x4}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}, 0x0) 358.562921ms ago: executing program 1 (id=223): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="fd00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 327.813613ms ago: executing program 0 (id=224): r0 = socket(0x18, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x63) 326.535684ms ago: executing program 3 (id=225): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x100005, 0x2}, 0x48) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x2, 0xcc, 0x8, 0x40, 0x0, 0x4, 0x1211, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0xb}, 0x200, 0x4, 0x5, 0x0, 0x4, 0x81, 0x0, 0x0, 0xac8a, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100530, 0x0, 0x400, 0x0, 0xfc94}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0xfffffff8}]}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000140)=0x0) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r4, 0x0, 0x0, 0x0, 0x0, "edd0961fcbe3a714699b769277aa362003e40900661e12bcca7f88cd6d07f3648c21a4b612af05000000a25b96f8fffffffffffffffe700a13056afd600927"}, 0x60) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000400)="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", 0xfc) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcbd, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @private2, 0x20, 0x7, 0x9, 0x81}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x80230, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x20, 0x0, 0x3, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) rseq(&(0x7f0000000200), 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 317.825884ms ago: executing program 0 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272f0a58a78a0c17f5b0000ebffffff0c00058008002a"], 0x44}}, 0x0) 242.27851ms ago: executing program 0 (id=227): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfea7) sendfile(r1, r3, &(0x7f0000000000), 0x11) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @local}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x6}, 0x8) pipe(&(0x7f0000000000)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}) io_uring_enter(r5, 0x5113, 0x0, 0x0, 0x0, 0x0) 183.314795ms ago: executing program 3 (id=228): socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 164.940227ms ago: executing program 3 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="7000028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003"], 0x8c}}, 0x0) 157.045817ms ago: executing program 0 (id=230): socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$usbmon(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x88) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x4, 0x80, 0x5, 0x2, 0xfc, 0x6, 0x0, 0x6ce, 0x8800, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xb72, 0x1, @perf_bp={&(0x7f0000000100)}, 0x10, 0x0, 0xe00, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d0, 0x330, 0x100, 0x330, 0x1e8, 0x330, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@local, @private2, [], [], 'dvmrp1\x00', 'bridge_slave_1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x59}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @private2, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r1, 0x80044944, &(0x7f0000000040)) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5393, &(0x7f0000000000)=ANY=[@ANYBLOB="93"]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = getpgid(0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000006c0)=r4) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x2, 0x1, 0x3, 0x7, 0x1f}) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x11dd, &(0x7f00000012c0)="$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") perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x9, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x2404c881}, 0x40041) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a00df0214f9f407000904001f000000ff02000200020000", 0x1c) 100.752962ms ago: executing program 3 (id=231): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@ipv4_getrule={0x1c, 0x22, 0x97356e0cab056bf}, 0x1c}}, 0x0) 87.881043ms ago: executing program 3 (id=232): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000080)={[{@i_version}, {@dioread_nolock}]}, 0x21, 0x4b0, &(0x7f0000000f00)="$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") semget$private(0x0, 0x4, 0x623) iopl(0x3) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map=0x1, 0xffffffffffffffff, 0x5, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0xa, 0x6, 0x101}, 0x14}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(0xffffffffffffffff, 0x4b49, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrlimit(0x0, 0x0) 0s ago: executing program 0 (id=233): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7312, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x20000, 0x101}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') unshare(0x2000400) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) fchdir(r2) r5 = open(0x0, 0x0, 0x0) getdents(r5, &(0x7f0000000300)=""/104, 0x68) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000fe8540000000030a01020000000000000000010000000900030073797a320000f32614000480080002400000000008000140000000040900010073797a3000"], 0x9c}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xc0600, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c200000e018db830e90086dd60e5be9e0000890000000700000000000000000000000000fe8000000000000000000000000000aa2fbbab068347e2caa6008b660c699666b5b45261e11ce09312b2862d12c17d06c20df9eff5ef8f7cadba7d5e06bd6abff5fe50f781557a3c62f9afcb0b0232bebe7c10abc484ef04152f6c18f1cfa76f06cec9c09fdf2e2a8bfa7922f0cb64e09a8bc7e6b9c498174007403efbce88bf27135ebad30097869d46b4b3c1ee160b503befed6efcc646afdc745a205918a4a9aaec057d2f37"], 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xfffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 17.010870][ T29] audit: type=1400 audit(1722370997.055:81): avc: denied { read } for pid=2941 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 21.487946][ T29] audit: type=1400 audit(1722371001.525:82): avc: denied { mounton } for pid=3245 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.488929][ T3245] cgroup: Unknown subsys name 'net' [ 21.510714][ T29] audit: type=1400 audit(1722371001.525:83): avc: denied { mount } for pid=3245 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.538036][ T29] audit: type=1400 audit(1722371001.565:84): avc: denied { unmount } for pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.675572][ T3245] cgroup: Unknown subsys name 'rlimit' [ 21.767529][ T29] audit: type=1400 audit(1722371001.805:85): avc: denied { setattr } for pid=3245 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.790809][ T29] audit: type=1400 audit(1722371001.805:86): avc: denied { create } for pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.811406][ T29] audit: type=1400 audit(1722371001.805:87): avc: denied { write } for pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.812608][ T3250] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.831734][ T29] audit: type=1400 audit(1722371001.805:88): avc: denied { read } for pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.860559][ T29] audit: type=1400 audit(1722371001.805:89): avc: denied { mounton } for pid=3245 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.885317][ T29] audit: type=1400 audit(1722371001.805:90): avc: denied { mount } for pid=3245 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.886121][ T3245] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.908728][ T29] audit: type=1400 audit(1722371001.885:91): avc: denied { relabelto } for pid=3250 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.943680][ T3257] chnl_net:caif_netlink_parms(): no params data found [ 22.999787][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 23.043530][ T3257] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.050777][ T3257] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.058117][ T3257] bridge_slave_0: entered allmulticast mode [ 23.064560][ T3257] bridge_slave_0: entered promiscuous mode [ 23.072609][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.079686][ T3257] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.086955][ T3257] bridge_slave_1: entered allmulticast mode [ 23.093200][ T3257] bridge_slave_1: entered promiscuous mode [ 23.141697][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 23.151091][ T3257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.164270][ T3256] chnl_net:caif_netlink_parms(): no params data found [ 23.182299][ T3257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.217752][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 23.226067][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.233183][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.240342][ T3262] bridge_slave_0: entered allmulticast mode [ 23.246807][ T3262] bridge_slave_0: entered promiscuous mode [ 23.270110][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.277201][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.284355][ T3262] bridge_slave_1: entered allmulticast mode [ 23.290810][ T3262] bridge_slave_1: entered promiscuous mode [ 23.301749][ T3257] team0: Port device team_slave_0 added [ 23.328938][ T3257] team0: Port device team_slave_1 added [ 23.343861][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.370147][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.379447][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.386446][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.412357][ T3257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.423185][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.430310][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.437543][ T3268] bridge_slave_0: entered allmulticast mode [ 23.443945][ T3268] bridge_slave_0: entered promiscuous mode [ 23.455098][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.462203][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.469324][ T3264] bridge_slave_0: entered allmulticast mode [ 23.475665][ T3264] bridge_slave_0: entered promiscuous mode [ 23.491458][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.498418][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.524380][ T3257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.535133][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.542219][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.549383][ T3268] bridge_slave_1: entered allmulticast mode [ 23.555692][ T3268] bridge_slave_1: entered promiscuous mode [ 23.561779][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.568879][ T3256] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.576051][ T3256] bridge_slave_0: entered allmulticast mode [ 23.582500][ T3256] bridge_slave_0: entered promiscuous mode [ 23.588895][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.596056][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.603249][ T3264] bridge_slave_1: entered allmulticast mode [ 23.609649][ T3264] bridge_slave_1: entered promiscuous mode [ 23.621281][ T3262] team0: Port device team_slave_0 added [ 23.627808][ T3262] team0: Port device team_slave_1 added [ 23.646710][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.653759][ T3256] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.660851][ T3256] bridge_slave_1: entered allmulticast mode [ 23.667322][ T3256] bridge_slave_1: entered promiscuous mode [ 23.678540][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.693242][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.707126][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.721135][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.728112][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.754026][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.765337][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.772267][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.798183][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.809554][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.823851][ T3256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.849304][ T3264] team0: Port device team_slave_0 added [ 23.855977][ T3256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.876898][ T3257] hsr_slave_0: entered promiscuous mode [ 23.882815][ T3257] hsr_slave_1: entered promiscuous mode [ 23.894325][ T3264] team0: Port device team_slave_1 added [ 23.900614][ T3268] team0: Port device team_slave_0 added [ 23.911881][ T3256] team0: Port device team_slave_0 added [ 23.923106][ T3268] team0: Port device team_slave_1 added [ 23.937673][ T3256] team0: Port device team_slave_1 added [ 23.969863][ T3256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.976852][ T3256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.002751][ T3256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.013945][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.020879][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.046830][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.059630][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.066587][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.092494][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.103698][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.110663][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.136568][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.148886][ T3262] hsr_slave_0: entered promiscuous mode [ 24.154824][ T3262] hsr_slave_1: entered promiscuous mode [ 24.160587][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.168177][ T3262] Cannot create hsr debugfs directory [ 24.179632][ T3256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.186606][ T3256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.212596][ T3256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.223578][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.230538][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.256412][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.311966][ T3264] hsr_slave_0: entered promiscuous mode [ 24.317810][ T3264] hsr_slave_1: entered promiscuous mode [ 24.323566][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.331193][ T3264] Cannot create hsr debugfs directory [ 24.353082][ T3256] hsr_slave_0: entered promiscuous mode [ 24.359083][ T3256] hsr_slave_1: entered promiscuous mode [ 24.365066][ T3256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.372600][ T3256] Cannot create hsr debugfs directory [ 24.385357][ T3268] hsr_slave_0: entered promiscuous mode [ 24.391319][ T3268] hsr_slave_1: entered promiscuous mode [ 24.397218][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.404788][ T3268] Cannot create hsr debugfs directory [ 24.514133][ T3257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.535466][ T3257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.551156][ T3257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.570596][ T3257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.602722][ T3262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.612464][ T3262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.620841][ T3262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.629447][ T3262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.652432][ T3264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.660941][ T3264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.674288][ T3264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.682622][ T3264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.716656][ T3268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.736182][ T3268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.744533][ T3268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.754512][ T3268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.786529][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.797784][ T3256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.806513][ T3256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.816482][ T3257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.823411][ T3256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.831758][ T3256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.852530][ T3257] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.865988][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.880970][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.888057][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.897024][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.904067][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.918029][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.925091][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.945869][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.961353][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.968491][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.983479][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.031365][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.038507][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.047660][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.054733][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.076803][ T3256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.094924][ T3264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.105355][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.141639][ T3256] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.163508][ T3257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.178584][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.185695][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.195332][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.202350][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.213572][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.244910][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.253036][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.267923][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.287352][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.294451][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.303496][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.310615][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.331836][ T3268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.342223][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.406345][ T3257] veth0_vlan: entered promiscuous mode [ 25.422426][ T3256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.446647][ T3257] veth1_vlan: entered promiscuous mode [ 25.453090][ T3262] veth0_vlan: entered promiscuous mode [ 25.462065][ T3262] veth1_vlan: entered promiscuous mode [ 25.480133][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.506603][ T3262] veth0_macvtap: entered promiscuous mode [ 25.520800][ T3257] veth0_macvtap: entered promiscuous mode [ 25.533643][ T3257] veth1_macvtap: entered promiscuous mode [ 25.547451][ T3262] veth1_macvtap: entered promiscuous mode [ 25.560027][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.569472][ T3264] veth0_vlan: entered promiscuous mode [ 25.585687][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.596661][ T3256] veth0_vlan: entered promiscuous mode [ 25.608823][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.619385][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.630365][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.639654][ T3264] veth1_vlan: entered promiscuous mode [ 25.650245][ T3257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.658977][ T3257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.667684][ T3257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.676394][ T3257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.686380][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.696945][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.707688][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.716229][ T3256] veth1_vlan: entered promiscuous mode [ 25.725181][ T3262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.733897][ T3262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.742647][ T3262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.751536][ T3262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.795073][ T3264] veth0_macvtap: entered promiscuous mode [ 25.810340][ T3256] veth0_macvtap: entered promiscuous mode [ 25.820497][ T3264] veth1_macvtap: entered promiscuous mode [ 25.837154][ T3256] veth1_macvtap: entered promiscuous mode [ 25.847532][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.858005][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.867812][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.878227][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.898879][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.915757][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.926275][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.936140][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.946606][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.963745][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.974831][ T3405] capability: warning: `syz.0.8' uses 32-bit capabilities (legacy support in use) [ 25.980160][ T3268] veth0_vlan: entered promiscuous mode [ 25.991969][ T3407] loop1: detected capacity change from 0 to 128 [ 26.002535][ T3264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.011445][ T3264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.020301][ T3264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.029546][ T3264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.042550][ T3409] capability: warning: `syz.0.9' uses deprecated v2 capabilities in a way that may be insecure [ 26.047490][ T3407] FAT-fs (loop1): Directory bread(block 32) failed [ 26.060225][ T3407] FAT-fs (loop1): Directory bread(block 33) failed [ 26.064984][ T3268] veth1_vlan: entered promiscuous mode [ 26.072299][ T3407] FAT-fs (loop1): Directory bread(block 34) failed [ 26.078966][ T3407] FAT-fs (loop1): Directory bread(block 35) failed [ 26.086021][ T3407] FAT-fs (loop1): Directory bread(block 36) failed [ 26.089039][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.092687][ T3407] FAT-fs (loop1): Directory bread(block 37) failed [ 26.102964][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.102974][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.120196][ T3407] FAT-fs (loop1): Directory bread(block 38) failed [ 26.129824][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.129835][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.129847][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.132915][ T3256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.174330][ T3407] FAT-fs (loop1): Directory bread(block 39) failed [ 26.180876][ T3407] FAT-fs (loop1): Directory bread(block 40) failed [ 26.187461][ T3407] FAT-fs (loop1): Directory bread(block 41) failed [ 26.209161][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.219671][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.229516][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.239706][ T3407] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 26.239994][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.247445][ T3407] FAT-fs (loop1): Filesystem has been set read-only [ 26.257251][ T3256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.274350][ T3256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.290589][ T3256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.293100][ T3407] syz.1.2: attempt to access beyond end of device [ 26.293100][ T3407] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 26.310934][ T3407] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 26.327058][ T3256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.335951][ T3256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.344793][ T3256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.353518][ T3256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.414635][ T3268] veth0_macvtap: entered promiscuous mode [ 26.438400][ T3268] veth1_macvtap: entered promiscuous mode [ 26.470186][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.480637][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.490503][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.500961][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.510796][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.521356][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.528181][ T3432] loop0: detected capacity change from 0 to 512 [ 26.531402][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.547999][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.548674][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 26.548696][ T29] audit: type=1400 audit(1722371006.585:144): avc: denied { ioctl } for pid=3428 comm="syz.1.16" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.549053][ T29] audit: type=1400 audit(1722371006.585:145): avc: denied { read } for pid=3428 comm="syz.1.16" dev="nsfs" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.549159][ T29] audit: type=1400 audit(1722371006.585:146): avc: denied { open } for pid=3428 comm="syz.1.16" path="net:[4026532519]" dev="nsfs" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.552279][ T3429] loop1: detected capacity change from 0 to 512 [ 26.552450][ T3429] ======================================================= [ 26.552450][ T3429] WARNING: The mand mount option has been deprecated and [ 26.552450][ T3429] and is ignored by this kernel. Remove the mand [ 26.552450][ T3429] option from the mount to silence this warning. [ 26.552450][ T3429] ======================================================= [ 26.552766][ T29] audit: type=1400 audit(1722371006.585:147): avc: denied { create } for pid=3427 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 26.553651][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.577370][ T3429] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.597068][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.614353][ T29] audit: type=1400 audit(1722371006.605:148): avc: denied { bind } for pid=3427 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 26.637293][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.643475][ T29] audit: type=1400 audit(1722371006.605:149): avc: denied { name_bind } for pid=3427 comm="syz.3.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 26.678290][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.678307][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.678323][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.678339][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.697468][ T29] audit: type=1400 audit(1722371006.605:150): avc: denied { node_bind } for pid=3427 comm="syz.3.4" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 26.704621][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.704635][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.707357][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.717779][ T29] audit: type=1400 audit(1722371006.605:151): avc: denied { listen } for pid=3427 comm="syz.3.4" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 26.762541][ T3268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.777358][ T29] audit: type=1400 audit(1722371006.605:152): avc: denied { connect } for pid=3427 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 26.777395][ T29] audit: type=1400 audit(1722371006.605:153): avc: denied { name_connect } for pid=3427 comm="syz.3.4" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 26.788942][ T3429] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 26.797813][ T3268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.808217][ T3429] block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 26.808537][ T3429] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.16: invalid indirect mapped block 4278190080 (level 0) [ 26.818059][ T3268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.840360][ T3429] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.16: invalid indirect mapped block 1 (level 1) [ 26.849840][ T3268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.865366][ T3429] EXT4-fs (loop1): 1 truncate cleaned up [ 26.875777][ T3432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.911749][ T3429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.917486][ T3432] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.939485][ T3444] 9pnet_fd: Insufficient options for proto=fd [ 27.017122][ T69] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 27.074203][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.131540][ T3456] loop2: detected capacity change from 0 to 128 [ 27.147331][ T3456] FAT-fs (loop2): Directory bread(block 32) failed [ 27.151255][ C1] hrtimer: interrupt took 47253 ns [ 27.154586][ T3456] FAT-fs (loop2): Directory bread(block 33) failed [ 27.169982][ T3456] FAT-fs (loop2): Directory bread(block 34) failed [ 27.176794][ T3456] FAT-fs (loop2): Directory bread(block 35) failed [ 27.183439][ T3456] FAT-fs (loop2): Directory bread(block 36) failed [ 27.190166][ T3456] FAT-fs (loop2): Directory bread(block 37) failed [ 27.197347][ T3456] FAT-fs (loop2): Directory bread(block 38) failed [ 27.204273][ T3456] FAT-fs (loop2): Directory bread(block 39) failed [ 27.211447][ T3456] FAT-fs (loop2): Directory bread(block 40) failed [ 27.218356][ T3456] FAT-fs (loop2): Directory bread(block 41) failed [ 27.252247][ T3456] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 27.259953][ T3456] FAT-fs (loop2): Filesystem has been set read-only [ 27.269658][ T3456] syz.2.21: attempt to access beyond end of device [ 27.269658][ T3456] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 27.288606][ T3456] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 27.308054][ T3428] syz.1.16 (3428) used greatest stack depth: 11368 bytes left [ 27.332498][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.399168][ T3472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 27.408022][ T3472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 27.536798][ T3494] openvswitch: netlink: Message has 1 unknown bytes. [ 27.555636][ T3496] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.569414][ T3496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 27.582582][ T3496] loop1: detected capacity change from 0 to 512 [ 27.596367][ T3496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.609686][ T3496] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.622681][ T3496] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.37: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 27.796700][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 27.942227][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 27.967296][ T3524] openvswitch: netlink: Message has 1 unknown bytes. [ 28.004710][ T3521] usb usb8: usbfs: process 3521 (syz.3.47) did not claim interface 0 before use [ 28.079950][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 28.125634][ T3545] loop4: detected capacity change from 0 to 512 [ 28.133251][ T3545] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 28.148791][ T3545] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.58: invalid indirect mapped block 4278190080 (level 0) [ 28.162846][ T3545] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.58: invalid indirect mapped block 1 (level 1) [ 28.177268][ T3545] EXT4-fs (loop4): 1 truncate cleaned up [ 28.183684][ T3545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.250133][ T40] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 28.361281][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 28.370103][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 28.396975][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.444536][ T3571] loop1: detected capacity change from 0 to 128 [ 28.481727][ T3576] loop1: detected capacity change from 0 to 128 [ 28.491301][ T3576] FAT-fs (loop1): Directory bread(block 32) failed [ 28.497858][ T3576] FAT-fs (loop1): Directory bread(block 33) failed [ 28.504593][ T3576] FAT-fs (loop1): Directory bread(block 34) failed [ 28.511129][ T3576] FAT-fs (loop1): Directory bread(block 35) failed [ 28.517783][ T3576] FAT-fs (loop1): Directory bread(block 36) failed [ 28.524831][ T3576] FAT-fs (loop1): Directory bread(block 37) failed [ 28.531400][ T3576] FAT-fs (loop1): Directory bread(block 38) failed [ 28.537984][ T3576] FAT-fs (loop1): Directory bread(block 39) failed [ 28.545827][ T3576] FAT-fs (loop1): Directory bread(block 40) failed [ 28.552576][ T3576] FAT-fs (loop1): Directory bread(block 41) failed [ 28.589261][ T3576] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 28.596875][ T3576] FAT-fs (loop1): Filesystem has been set read-only [ 28.604934][ T3576] syz.1.69: attempt to access beyond end of device [ 28.604934][ T3576] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 28.618056][ T3576] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 28.698416][ T3596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.76'. [ 28.707295][ T3596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.76'. [ 28.966402][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.015696][ T3623] netlink: 68 bytes leftover after parsing attributes in process `syz.0.88'. [ 29.075645][ T3629] block device autoloading is deprecated and will be removed. [ 29.102649][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.113191][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.123096][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.133606][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.143622][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.143884][ T3638] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.154064][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.154077][ T3637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.154109][ T3637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.154557][ T3637] batadv_slave_1: entered promiscuous mode [ 29.211454][ T3641] loop0: detected capacity change from 0 to 512 [ 29.226737][ T3641] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 29.242698][ T3641] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.96: invalid indirect mapped block 4278190080 (level 0) [ 29.260264][ T3641] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.96: invalid indirect mapped block 1 (level 1) [ 29.279234][ T3641] EXT4-fs (loop0): 1 truncate cleaned up [ 29.281166][ T3648] loop3: detected capacity change from 0 to 512 [ 29.286280][ T3641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.306201][ T3648] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 29.332009][ T3648] EXT4-fs (loop3): invalid journal inode [ 29.341436][ T3648] EXT4-fs (loop3): can't get journal size [ 29.348362][ T3648] EXT4-fs (loop3): 1 truncate cleaned up [ 29.355216][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.370220][ T3648] No source specified [ 29.384631][ T3256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.394376][ T3346] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 29.637787][ T3673] loop2: detected capacity change from 0 to 2048 [ 29.674300][ T3673] loop2: p1 < > p4 [ 29.678664][ T3673] loop2: p4 size 8388608 extends beyond EOD, truncated [ 29.696625][ T3673] proc: Bad value for 'gid' [ 30.053193][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.100568][ T3683] loop4: detected capacity change from 0 to 512 [ 30.126588][ T3683] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 30.145756][ T3683] EXT4-fs (loop4): invalid journal inode [ 30.151429][ T3683] EXT4-fs (loop4): can't get journal size [ 30.199449][ T3683] EXT4-fs (loop4): 1 truncate cleaned up [ 30.214699][ T3683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.247847][ T3683] No source specified [ 30.263000][ T3708] loop3: detected capacity change from 0 to 512 [ 30.290587][ T3708] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 30.291167][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.307565][ T3708] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.117: invalid indirect mapped block 4278190080 (level 0) [ 30.322332][ T3710] loop2: detected capacity change from 0 to 2048 [ 30.333068][ T3708] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.117: invalid indirect mapped block 1 (level 1) [ 30.354187][ T3708] EXT4-fs (loop3): 1 truncate cleaned up [ 30.364672][ T3708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.374609][ T3710] loop2: p1 < > p4 [ 30.386854][ T3726] loop1: detected capacity change from 0 to 164 [ 30.400362][ T3710] loop2: p4 size 8388608 extends beyond EOD, truncated [ 30.451312][ T3710] proc: Bad value for 'gid' [ 30.451408][ T69] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 30.626628][ T3760] loop2: detected capacity change from 0 to 2048 [ 30.635016][ T3760] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.135: casefold flag without casefold feature [ 30.648009][ T3760] EXT4-fs (loop2): get root inode failed [ 30.653676][ T3760] EXT4-fs (loop2): mount failed [ 31.178451][ T3256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.334193][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.344744][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.354752][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.365349][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.375333][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.385830][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.395942][ T3812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.406891][ T3812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.417184][ T3812] batadv_slave_1: entered promiscuous mode [ 31.452750][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811580fc00: rx timeout, send abort [ 31.604866][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 31.604880][ T29] audit: type=1400 audit(1722371011.635:255): avc: denied { listen } for pid=3826 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 31.618748][ T3831] loop2: detected capacity change from 0 to 512 [ 31.636093][ T3829] loop0: detected capacity change from 0 to 512 [ 31.649733][ T3831] EXT4-fs: Ignoring removed bh option [ 31.656898][ T3829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.663642][ T3831] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 31.689463][ T3829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 31.702884][ T3835] loop4: detected capacity change from 0 to 512 [ 31.709274][ T3829] System zones: 1-12 [ 31.709845][ T3831] EXT4-fs (loop2): 1 truncate cleaned up [ 31.719386][ T3829] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.724680][ T3831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.745370][ T3829] EXT4-fs (loop0): 1 truncate cleaned up [ 31.751593][ T3829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.751737][ T3835] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.166: casefold flag without casefold feature [ 31.772554][ T3838] netlink: zone id is out of range [ 31.783280][ T29] audit: type=1400 audit(1722371011.825:256): avc: denied { map } for pid=3830 comm="syz.2.163" path="/29/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.788672][ T3835] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.166: couldn't read orphan inode 15 (err -117) [ 31.808222][ T29] audit: type=1400 audit(1722371011.825:257): avc: denied { execute } for pid=3830 comm="syz.2.163" path="/29/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.821171][ T3838] netlink: zone id is out of range [ 31.844816][ T29] audit: type=1400 audit(1722371011.825:258): avc: denied { create } for pid=3830 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.869563][ T29] audit: type=1400 audit(1722371011.825:259): avc: denied { getopt } for pid=3830 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.873688][ T3838] netlink: zone id is out of range [ 31.894586][ T3838] netlink: zone id is out of range [ 31.899717][ T3838] netlink: zone id is out of range [ 31.904849][ T3838] netlink: zone id is out of range [ 31.909983][ T3838] netlink: zone id is out of range [ 31.915986][ T3835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.917953][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.961057][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811580fc00: abort rx timeout. Force session deactivation [ 31.977778][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.011050][ T3848] loop2: detected capacity change from 0 to 1024 [ 32.017852][ T3848] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 32.040720][ T3846] loop1: detected capacity change from 0 to 2048 [ 32.051512][ T3848] netlink: 'syz.2.170': attribute type 5 has an invalid length. [ 32.067163][ T3846] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.169: casefold flag without casefold feature [ 32.080416][ T29] audit: type=1326 audit(1722371012.115:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3847 comm="syz.2.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc124f173b9 code=0x0 [ 32.102766][ T3856] loop3: detected capacity change from 0 to 2048 [ 32.111178][ T3857] netlink: 'syz.4.168': attribute type 25 has an invalid length. [ 32.120261][ T3846] EXT4-fs (loop1): get root inode failed [ 32.126194][ T3846] EXT4-fs (loop1): mount failed [ 32.133980][ T3857] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.142786][ T3857] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.151513][ T3857] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.160241][ T3857] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.160718][ T3856] EXT4-fs: Ignoring removed bh option [ 32.174489][ T3856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.214982][ T3856] EXT4-fs: Ignoring removed nobh option [ 32.263929][ T29] audit: type=1400 audit(1722371012.245:261): avc: denied { bind } for pid=3847 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 32.280561][ T3856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.283120][ T29] audit: type=1400 audit(1722371012.245:262): avc: denied { read } for pid=3847 comm="syz.2.170" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.318962][ T29] audit: type=1400 audit(1722371012.245:263): avc: denied { open } for pid=3847 comm="syz.2.170" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.349021][ T3856] EXT4-fs error (device loop3): __ext4_remount:6491: comm syz.3.172: Abort forced by user [ 32.359240][ T3856] EXT4-fs (loop3): Remounting filesystem read-only [ 32.367036][ T3856] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 32.376721][ T3856] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 32.387651][ T3856] raw_sendmsg: syz.3.172 forgot to set AF_INET. Fix it! [ 32.671140][ T3256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.762015][ T3871] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.785197][ T29] audit: type=1400 audit(1722371012.825:264): avc: denied { create } for pid=3872 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 32.805348][ T3873] random: crng reseeded on system resumption [ 32.851311][ T3858] delete_channel: no stack [ 32.906222][ T3857] syz.4.168 (3857) used greatest stack depth: 10968 bytes left [ 32.922280][ T3875] __nla_validate_parse: 16 callbacks suppressed [ 32.922292][ T3875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 32.967145][ T3878] loop4: detected capacity change from 0 to 512 [ 32.982815][ T3878] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 33.009950][ T3878] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.178: invalid indirect mapped block 4278190080 (level 0) [ 33.026699][ T3878] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.178: invalid indirect mapped block 1 (level 1) [ 33.041249][ T3878] EXT4-fs (loop4): 1 truncate cleaned up [ 33.049096][ T3878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.088481][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.115246][ T50] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 33.157329][ T3905] loop0: detected capacity change from 0 to 164 [ 33.196044][ T3907] loop3: detected capacity change from 0 to 2048 [ 33.207913][ T3907] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.189: casefold flag without casefold feature [ 33.221012][ T3907] EXT4-fs (loop3): get root inode failed [ 33.226699][ T3907] EXT4-fs (loop3): mount failed [ 33.803160][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.824454][ T3916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 33.908360][ T3918] loop4: detected capacity change from 0 to 2048 [ 33.917022][ T3918] EXT4-fs: Ignoring removed bh option [ 33.922538][ T3918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.929489][ T3918] EXT4-fs: Ignoring removed nobh option [ 33.941256][ T3923] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.974198][ T3918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.001503][ T3918] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.191: Abort forced by user [ 34.032182][ T3918] EXT4-fs (loop4): Remounting filesystem read-only [ 34.063576][ T3935] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 34.072507][ T3935] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 34.172999][ T3918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63676 sclass=netlink_route_socket pid=3918 comm=syz.4.191 [ 34.189584][ T3949] loop1: detected capacity change from 0 to 512 [ 34.212901][ T3949] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 34.240441][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.251341][ T3949] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.203: invalid indirect mapped block 4278190080 (level 0) [ 34.270599][ T3949] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.203: invalid indirect mapped block 1 (level 1) [ 34.291899][ T3949] EXT4-fs (loop1): 1 truncate cleaned up [ 34.298356][ T3949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.331528][ T3961] loop0: detected capacity change from 0 to 512 [ 34.353148][ T3961] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8 [ 34.374404][ T11] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 34.461094][ T3973] loop4: detected capacity change from 0 to 1024 [ 34.469910][ T3973] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 34.496006][ T3973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.510886][ T3973] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 34.518582][ T3973] netlink: 224 bytes leftover after parsing attributes in process `syz.4.210'. [ 34.545473][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.669717][ T3983] loop3: detected capacity change from 0 to 1024 [ 34.677231][ T3983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.693974][ T3983] EXT4-fs (loop3): stripe (10) is not aligned with cluster size (16), stripe is disabled [ 34.703871][ T3983] EXT4-fs (loop3): can't mount with commit=10, fs mounted w/o journal [ 34.727641][ T3989] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.758407][ T3993] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 34.777259][ T3994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=3994 comm=syz.3.214 [ 34.839265][ T3998] loop2: detected capacity change from 0 to 1024 [ 34.848158][ T3998] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 34.862020][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 34.871116][ T3998] netlink: 'syz.2.220': attribute type 5 has an invalid length. [ 35.004102][ T3262] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.081380][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 35.090345][ T4020] netlink: 'syz.1.223': attribute type 25 has an invalid length. [ 35.101810][ T4020] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.110616][ T4020] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.119531][ T4020] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.128417][ T4020] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.139658][ T4013] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 35.215231][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 35.231601][ T4030] netlink: 52 bytes leftover after parsing attributes in process `syz.3.229'. [ 35.241903][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 35.282856][ T4034] loop3: detected capacity change from 0 to 512 [ 35.289480][ T4034] EXT4-fs: Ignoring removed i_version option [ 35.304341][ T4029] loop0: detected capacity change from 0 to 8192 [ 35.305015][ T4034] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.232: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 35.328759][ T4034] EXT4-fs error (device loop3): ext4_quota_enable:7025: comm syz.3.232: Bad quota inode: 4, type: 1 [ 35.339828][ T4034] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.355745][ T4034] EXT4-fs (loop3): mount failed [ 35.362048][ T2959] ================================================================== [ 35.370126][ T2959] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 35.376900][ T2959] [ 35.379224][ T2959] write to 0xffff888101f07620 of 8 bytes by task 4034 on cpu 1: [ 35.386862][ T2959] inc_diskseq+0x2c/0x40 [ 35.386883][ T2959] disk_force_media_change+0x9f/0xf0 [ 35.396376][ T2959] lo_release+0x2d0/0x400 [ 35.400710][ T2959] bdev_release+0x3d2/0x430 [ 35.405213][ T2959] blkdev_release+0x15/0x20 [ 35.409716][ T2959] __fput+0x192/0x6f0 [ 35.413699][ T2959] __fput_sync+0x44/0x60 [ 35.417950][ T2959] __se_sys_close+0x101/0x1b0 [ 35.422633][ T2959] __x64_sys_close+0x1f/0x30 [ 35.427223][ T2959] x64_sys_call+0x2630/0x2e00 [ 35.431901][ T2959] do_syscall_64+0xc9/0x1c0 [ 35.436412][ T2959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.442309][ T2959] [ 35.444620][ T2959] read to 0xffff888101f07620 of 8 bytes by task 2959 on cpu 0: [ 35.452155][ T2959] block_uevent+0x31/0x50 [ 35.456485][ T2959] dev_uevent+0x2f3/0x380 [ 35.460807][ T2959] uevent_show+0x11e/0x210 [ 35.465227][ T2959] dev_attr_show+0x3a/0xa0 [ 35.469643][ T2959] sysfs_kf_seq_show+0x17c/0x250 [ 35.474583][ T2959] kernfs_seq_show+0x7c/0x90 [ 35.479177][ T2959] seq_read_iter+0x2d7/0x940 [ 35.483767][ T2959] kernfs_fop_read_iter+0xc6/0x310 [ 35.488884][ T2959] vfs_read+0x5e9/0x6e0 [ 35.493043][ T2959] ksys_read+0xeb/0x1b0 [ 35.497205][ T2959] __x64_sys_read+0x42/0x50 [ 35.501721][ T2959] x64_sys_call+0x2a36/0x2e00 [ 35.506409][ T2959] do_syscall_64+0xc9/0x1c0 [ 35.510924][ T2959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.516830][ T2959] [ 35.519146][ T2959] value changed: 0x0000000000000049 -> 0x000000000000004c [ 35.526254][ T2959] [ 35.528575][ T2959] Reported by Kernel Concurrency Sanitizer on: [ 35.534727][ T2959] CPU: 0 UID: 0 PID: 2959 Comm: udevd Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 35.544971][ T2959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 35.555025][ T2959] ================================================================== [ 35.674494][ T4004] delete_channel: no stack [ 35.738221][ T4003] syz.4.222 (4003) used greatest stack depth: 9800 bytes left