last executing test programs: 5.13357753s ago: executing program 3 (id=200): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) timerfd_create(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)='#', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x436, &(0x7f00000004c0)="$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") syz_open_procfs$namespace(0x0, 0x0) r2 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x14, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd41, 0x0, 0x0, 0x0, 0xf}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfb1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000200)='GPL\x00', 0x71, 0x68, &(0x7f00000003c0)=""/104, 0x100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r4, r2, r2, r5], 0x0, 0x10, 0x2}, 0x90) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)={{0x0, 0x5, 0x10, 0x8c, 0xf, 0x8000000000000001, 0x10001, 0x3ff, 0x8, 0x5, 0x2, 0x8, 0x6, 0x35, 0x1}, 0x8, [0x0]}) 4.087503195s ago: executing program 3 (id=232): ioperm(0x6, 0x6, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x12000000}, 0x0) 3.741753784s ago: executing program 3 (id=236): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'bridge_slave_0\x00'}, {0x20, 'bridge_slave_0\x00'}, {0x20, '\x00'}, {}], 0xa, "3273c9501c45da97fb8a0e72c0296c1b5429fe22eb75c88d3e7ee56ba936f71141eaff99aeaeb2410f51b4d9efcb8ce11cc0f2f1308c56fd0bd78278311c589f0d7c48201235b8f789d37fdb484c34411992a8b2f1ce619afeca35466c4cdbb3f6d3875201044b67c7f947d4b71b9f30d167741b69d7933b55be92b32789949d9f5cb0b913362f80f2b0c1349b1c275d10dbc9e483f8fd4fcc37b73fc6c6b9"}, 0xcd) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfc7f, 0xbb4a}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c04c949f5ecba858eebbe4cefe5dd6400"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x108, 0x0, 0x148, 0x108, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@loopback}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2.850203366s ago: executing program 3 (id=249): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file2\x00', 0xcc04, &(0x7f0000000340)={[{@dots}, {@fat=@debug}, {@dots}, {@dots}, {@fat=@nfs}, {@fat=@time_offset={'time_offset', 0x3d, 0x514}}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@fat=@errors_continue}, {@dots}, {@nodots}, {@dots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@fat=@nocase}]}, 0xfd, 0x1d8, &(0x7f0000000d80)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 2.826873608s ago: executing program 3 (id=250): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') r1 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r1, 0x1) r2 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x5, 0x0) setgid(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003b000900000000000000000001000000180002"], 0x2c}}, 0x0) 2.258187345s ago: executing program 1 (id=258): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) 2.225055897s ago: executing program 1 (id=261): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x1}, {0x5}, {0x6}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040), 0xc, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0x55, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1092fd6f", @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0c009900001000001b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x24044815) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="9281cafcca31a8b90701928909280adc0fce94eb3cadf7b8ec201e9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fff000/0x1000)=nil) ioctl$FICLONE(r4, 0x40049409, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$packet(0x11, 0x0, 0x300) ioctl$int_in(r6, 0x5421, &(0x7f00000003c0)=0x80) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) ioctl$VT_ACTIVATE(r5, 0x5606, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x34, 0x0, 0xffffffff}, 0x20) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe31, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'rose0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.373930167s ago: executing program 1 (id=269): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000800)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c646d61736b3d30303030303030303030303030303030303037373737372c646f74732c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c6e6f646f74732c646f74732c6e6f646f74732c616c6c6f775f7574696d653d3030303030303030303030303030000000003030cfa65c433030312c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d5554432c6e6f646f74732c6e66732c646f74732c6e6f646f74732c636865636b3d7374726963742c00"], 0xfd, 0x1bf, &(0x7f0000000640)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000480), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}], [], 0x6b}}) (fail_nth: 3) 948.244332ms ago: executing program 0 (id=280): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0xd, @void}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58}, 0x90) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x12, 0x0, 0x0) syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz72twjAYBdCbl2cl6RiBNajSsQH7MANMQEvBhsgockAsgBDSOYWvr3+KL3zXZVrW/7eT8z1/SYaUpJQk422XOUm/PpinpPZJt5Rtef7bt3j1DH1K17abFsecxozrda05XD86GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8iEcAAAD//7J4CYI=") socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r0) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@rand_addr=0xfffffffc, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, 0xe8) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b2f, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70700000000000063119f00000000000700000000000000950000000000000086b223c17fd5c6311e80752befb60f283890ff0a97195cba4872b282cd13a47f256c1748557c"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) 944.118792ms ago: executing program 2 (id=281): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000400), 0xfe, 0x43a, &(0x7f00000008c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) (async) creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ftruncate(r2, 0x7fff) (async) ftruncate(r2, 0x7fff) io_setup(0x7f, &(0x7f0000000100)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x20, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xf8}}, 0x0) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, r4, 0x3, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 737.903699ms ago: executing program 2 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x13c}}, 0x0) 737.390459ms ago: executing program 0 (id=283): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x58d402) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000280), 0x1401, &(0x7f0000001400)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYRES16=r6, @ANYRES64=r1]) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000020000000b"], 0x78) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140), 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) (async) getsockopt$inet_pktinfo(r10, 0x0, 0x14, 0x0, &(0x7f0000000480)) (async) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x12, r9, 0xffffe000) 704.295942ms ago: executing program 0 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@mpls_newroute={0x144, 0x18, 0x0, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x20, 0x6703c45813f0427e, 0xfa, 0xfc, 0x2, 0xc8, 0x0, 0x400}, [@RTA_DST={0x8, 0x1, {0x40000, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8, 0x4, r3}, @RTA_DST={0x8, 0x1, {0x7}}, @RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xf36, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0x100}, {0x4, 0x0, 0x1}, {0x7}, {0x2}, {0x5}, {0x5}, {0xb, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xf747}, {0x9}, {0x0, 0x0, 0x1}, {}, {0xff001, 0x0, 0x1}, {0x6}, {0xa, 0x0, 0x1}, {0x200}, {0x1ff}, {0x9}, {0x2, 0x0, 0x1}, {0x9}, {}, {0x5}]}, @RTA_NEWDST={0xffffffb0, 0x13, [{0x2}, {0x1}, {0x0, 0x0, 0x1}, {0x98, 0x0, 0x1}, {0x40}, {0xffff8}, {0x7, 0x0, 0x1}, {0x4}, {0x3}, {0x45}, {0xfffe0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xa}, {}, {0x2, 0x0, 0x1}, {0x9}, {0x2, 0x0, 0x1}, {0x5}, {0xde}, {0xfff}, {0xdcd}, {0x1}, {0x7ff}, {0xaf41}, {0xff}, {0x50c3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x80}, {0x8000, 0x0, 0x1}, {0x4}, {0x1}]}]}, 0x144}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x10, 0x20}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r5, 0x1, 0x4, &(0x7f0000000000)=0x3ff, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getdents(0xffffffffffffffff, &(0x7f0000000300)=""/104, 0x68) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/182, 0xb6) remap_file_pages(&(0x7f0000917000/0x2000)=nil, 0x2000, 0x6000000, 0xf, 0x80000) move_mount(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x40010, r7, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000040)={0x10000018}) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1, 0x0, 0x7) 694.003243ms ago: executing program 2 (id=285): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 612.474039ms ago: executing program 2 (id=287): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x40000022) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) fcntl$notify(r1, 0x402, 0x5) (async) r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008082, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000000ac0)="$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") ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000040)={0x2, [0x0, 0x0]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 542.112735ms ago: executing program 4 (id=288): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r0, 0x811, 0x1000000, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0) 541.470045ms ago: executing program 0 (id=289): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x89f0, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe, 0x0, 0xfd, "bb5dee00"}) 541.062665ms ago: executing program 4 (id=290): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) getresgid(&(0x7f0000000140), &(0x7f0000000580), &(0x7f0000000180)) 509.603517ms ago: executing program 4 (id=291): socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = io_uring_setup(0x30d3, &(0x7f0000000040)) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f00000001c0), 0xc) read(r2, &(0x7f0000000180)=""/52, 0xfffffdef) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) fcntl$dupfd(r3, 0x0, r3) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=@ceph_nfs_fh={0x8, 0x1, {0x8}}, 0x200000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0xfffffffc, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x32, 0x0, 0xee01}, {}, {}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 497.665719ms ago: executing program 2 (id=292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080), 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffffffffffffff8d) 446.179093ms ago: executing program 0 (id=293): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$tipc(0x1e, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000040)=""/48, 0x30) getdents64(r1, 0xfffffffffffffffe, 0x29) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400000000476d47322e0c42ce", @ANYRES32=0x0, @ANYBLOB="0500000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x800000000000000}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000580)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 445.856063ms ago: executing program 1 (id=294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x4000, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x0) 445.221213ms ago: executing program 3 (id=295): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 32) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async, rerun: 32) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x40040000) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e164fcc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ee0742e013d5d412046", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x0, [{}, {}, {}, {0x0, 0x0}, {0x0, r3}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {r4, r3}, {}, {r4}, {}, {0x0, 0x0}, {}, {}, {}, {r4}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {r4}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {r4, 0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {r4}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, r3}, {0x0}, {}, {0x0}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {r4, r3}, {r4}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, r3}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r4}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "75db64cf7310f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002800)={0x1a, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r25}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r42}, {}, {}, {}, {}, {0x0, r56}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {r62}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {0x0, r12}, {r33}, {}, {}, {0x0, r63}, {}, {r28}, {r47}, {r26}, {0x0, r43}, {}, {0x0, r6}, {}, {r66}, {0x0, r19}, {}, {r57}, {}, {0x0, r36}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r33}, {}, {0x0, r45}, {0x0, r38}, {}, {r48}, {}, {}, {}, {}, {}, {}, {0x0, r35}, {r22, r65}, {0x0, r64}, {}, {}, {}, {r39, r60}, {r11}, {}, {}, {0x0, r14}, {0x0, r30}, {}, {}, {}, {}, {0x0, r29}, {}, {}, {}, {}, {}, {}, {}, {r50}, {r21}, {0x0, r7}, {}, {}, {r27}, {r54, r37}, {r13}, {r8}, {}, {r53, r24}, {}, {}, {}, {}, {}, {}, {r52, r44}, {}, {}, {r70}, {r15, r60}, {}, {r51, r36}, {0x0, r40}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r55}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {0x0, r46}, {0x0, r67}, {0x0, r45}, {}, {r69}, {0x0, r58}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r32}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r59, r49}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r34}, {}, {}, {r17}, {}, {}, {r68}, {0x0, r34}, {}, {0x0, r23}, {0x0, r5}, {}, {}, {}, {r31}, {}, {}, {}, {}, {}, {0x0, r61}, {}, {}, {0x0, r41}, {r9}], 0x0, "d30f30dd6d2240"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r71 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r71, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 384.959618ms ago: executing program 2 (id=297): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002f3fffff2ffffff00000004000000000000d6cb02d34c97f89d332bbf5e69d05d2b6e3d5da57c62a99026f05aa2fe6b79c22bc1bb768d2f59616b08d3c3fc05fa85385b3ad3fe0000000000000000000000ba3835c91e1b8b0cbcec08103e3f9e8b5f81d2397f762af62db5c9595e3d340bb8110317f9e1e99f14a4b3c0454c8c6c9770cfc09dda8b4e56c59dac5f3eccfe0c3888085e9e54700fe66db8aab5359e0658ec9c8568f9595698e11941ddcf748c66bc04e6ecf742f74a57f9c8045d1ddd"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x400454de, 0xf0ff1f00000000) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x133, 0x0, 0x0, {{@in=@loopback, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="73f64a79"], 0x4) write(r2, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$cgroup_int(r7, &(0x7f0000000080), 0x12) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f00000004c0), &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) r9 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020a0000052406000005240000000d240f0100000000000000000009058202000200000009050302"], 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 347.785431ms ago: executing program 1 (id=298): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x80005, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xc}, {0xffc3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 290.089976ms ago: executing program 4 (id=299): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r1, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_io_uring_setup(0xd7d, &(0x7f00000035c0)={0x0, 0x0, 0x100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000380)=@in={0x2, 0x0, @local}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000680001000000000000000000020000000000000008000600f0ffffff08000500188e"], 0x28}}, 0x0) r8 = accept4$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x80000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffce}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r11, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r9}, 0x20) shutdown(r9, 0x1) recvmmsg(r9, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000480)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000440)={0xa, 0x4e22, 0x8bd, @remote, 0xc0ba}, 0x1c) 47.666095ms ago: executing program 0 (id=300): socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x10e, 0x8000000000004) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) unshare(0x2c060000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "0000000000034000"}}}]}, 0x48}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000180)={[{@dioread_nolock}]}, 0x9, 0x60c, &(0x7f00000001c0)="$eJzs3c9vFGUfAPDvTH/Svrwt5M2reJAmxkCitLSAIcZEiFdC8MfNU6WFIIUSWqNFEkuCF43x4sHEkwfxv1ASrx68evDiyZA0xnAQg7JmtrNl2+2W7XZ/tN3PJxn6zAw7z3fKfnmeffaZmQA61kj2RxpxICKuJRFDZfu6I985svz37v9x83y2JFEovPl7Ejc/ShbLj5XkPwfzF/8zFMlPacT+rsp65xZuXJ6cmZm+nq+PzV+5Nja3cOPIpSuTF6cvTl+deGni5InjJ06OH93S+e0tK5+5/e77Q5+cffubrx4m49/+cjaJU/Eojy07r7Wv7dtSzdnvbCQKyx6Ub89+rye3eOzt4s+h0vvksWTtBratC/n7sScinoqh6Cr71xyKj19va3BAUxWSKLVRQMdJ6sr//sYHArRYqR9Q+my/3ufgSmmTeyVAKyydXh4AWM79nogo5X/38thg9BfHBgbuJ6vGeZKI2NrI3LKsjh9/OHs7W6LKOBzQHIu3SqPca9v/pJibw9FfXBu4n67K/7Rsyba/UWf9I2vW5T+0zuKtiHg6b/97o+78f6fO+uU/AAAAAAAANM7d0xHx4nrz/9KV+T+968z/GYyIUw2o/8nf/6X38kLSgOqAMkunI16pmP/7d/ns4OGu/Hv+vcX5AD3phUsz00cj4r8RcTh6+rL18dWHXTVB+Mhn+7+sVn/5/L9syeovzQXMD3Wve82FuFOT85ONOXvobEu3Ip4pzv89mG9ZPf8na/+Tivb/09eyBL9WYx37n79zrtq+J+c/0CyFryMOrXv9z+PudrLx/TnGiv2BsVKvoNKzH37+XbX65T+0T9b+D2yc/31J+f165jZ3/N6IOLbQXai2v97+f2/yVlfp+JkPJufnr49H9CZnKrdPbC5m2K1K+VDKlyz/Dz+38fjfSv+/LA/3RMRijXX+/9Hgr9X2af+hfbL8n9q4/R9e3f5vttAfE3eGv89vMVbhXE3t//Fim34432L8D8pV3o+j1gRtS7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMOlEfGfSNLRlXKajo5GDEbE/2IgnZmdm3/hwux7V6eyfauf/z+0vJ6Unv8/XLY+sWb9WETsi4gvuvYU10fPz85MtfvkAQAAAAAAAAAAAAAAAAAAYJsYLF7zX+hbe/1/5reudkcHNF13/lO+Q+fprvuVhb6GBgK0XP35D+x0ted/T1PjAFqvev4/eFgoamk4QAvp/0PnqjP/fV0Au4D2HzpVjWN6/c2OA2iHmtv/pebGAQAAAAAANMS+g3d/TiJi8eU9xSXTm+8z2R92t7TdAQBtYw4vdK7u2XZHALSLz/hAslL6a92L/avP/k+aExAAAAAAAAAAAAAAUOHQAdf/Q6dKIzZ4hLe5/bCbbXD9/3rJ73YBsItUf/RHLW1/oocAO5jP+MCT2nHX/wMAAAAAAAAAAADANtB/4/LkzMz09bmFnVd4dXuEsbnC4uS2CKOhhUfNOXJPRGyPE2x1oXQLjjaG0eb/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBX/BgAA///kYDBi") syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0xb, 0x80000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$binfmt_script(r3, &(0x7f00000001c0), 0x6a) read$nci(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) 18.893708ms ago: executing program 4 (id=301): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) getresgid(&(0x7f0000000140), &(0x7f0000000580), &(0x7f0000000180)) 18.573108ms ago: executing program 4 (id=302): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='*', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)='\\', 0x1}], 0x1}}], 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r4, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca010000871611faba526a3501f1753258c767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d8201e8c4c3fda81599b7c4bf635910dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac454e1127e9c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6470fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c38937"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xfee, &(0x7f000062b000)=""/4078, 0x41100}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 1 (id=303): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000500), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x1, @mcast2, 0x4}, 0x1c, &(0x7f0000000780)=[{0x0}, {&(0x7f00000005c0)="72e6681010f6f5b4128d7d905e9f868bd6e021df46e4a23eb6da7dba7fb0e0aa0c980ddd9b7cccd4fe9720c6a0d876e4e0e42820343cfcef64a7c3ef468e7882b49d469ae1215aca64b7e3a8afbf1d0f559b57b1a438b0274afbdf836b421bccc2ae97313054635dd211c72f9847b01ebd2ff232fda66a4c89f3d8e26c9b5d3d", 0x80}, {&(0x7f0000000640)="b11ec96736a1c3e53c867cbfd2d5f5ffe9a18d4381e634157536ee83566709c1ad8b561bbc836d3f064548ced5054fed796fa8d5be3a4f15ad95ac61c115455c249c1baacac1018348f8b2638e1265435ba25f9dab4a10472139569dd290", 0x5e}, {&(0x7f00000006c0)="f18767894112cd0f4bb90ff3d261a6d4a1a9e0ff89187bf98736fa13d25eeae5d220ea5c3bffde4febf6a52381562d9866e8ea58dd24dcbab73ecb594c673c2e4e38d66075e9568baf5d25bf93ecccfc4a3dcd72c995aaffb7c70944d3c7a5dc220a7e2b4658061eb74b6ca841c2e0ba38a9ee6d3c9c84958dcd138c5a71f77e55d3928bf0b2d072905248c858bf9f20a17fcaff9029f6101c613a125531ebff", 0xa0}], 0x4}}, {{&(0x7f00000007c0)={0xa, 0x4e28, 0x0, @mcast1, 0x10001}, 0x1c, &(0x7f0000000500), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="20000000000000002900000021ec90370000002f00000000000000c204000000070000200000000000000029000000360000007300000000000000c2040000000900001400000000000000290000000800000000000000000000001400000000000000290000003400000080000000000000001400000000000000290000000b0000000000040100000000200000000000000029000000370000000800000000e700000001000401000000180000000000000029000000040000002b00000000000000140000000000000029000000080000000600000000000000"], 0xd8}}], 0x2, 0x4040845) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390400d502000000000000000000", @ANYRES32=r6, @ANYBLOB="01980000000000002800128008000100677265001c00028006000e0001000000080007000a"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): [ 18.883032][ T29] audit: type=1400 audit(1722649964.241:81): avc: denied { read } for pid=2942 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 24.107856][ T29] audit: type=1400 audit(1722649969.471:82): avc: denied { mounton } for pid=3248 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.108878][ T3248] cgroup: Unknown subsys name 'net' [ 24.130649][ T29] audit: type=1400 audit(1722649969.471:83): avc: denied { mount } for pid=3248 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.160075][ T29] audit: type=1400 audit(1722649969.491:84): avc: denied { unmount } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.328787][ T3248] cgroup: Unknown subsys name 'rlimit' [ 24.450667][ T29] audit: type=1400 audit(1722649969.811:85): avc: denied { setattr } for pid=3248 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.474063][ T29] audit: type=1400 audit(1722649969.811:86): avc: denied { create } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.494763][ T29] audit: type=1400 audit(1722649969.811:87): avc: denied { write } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.504441][ T3251] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.515401][ T29] audit: type=1400 audit(1722649969.811:88): avc: denied { read } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.536210][ T3248] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.544593][ T29] audit: type=1400 audit(1722649969.811:89): avc: denied { mounton } for pid=3248 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.579812][ T29] audit: type=1400 audit(1722649969.811:90): avc: denied { mount } for pid=3248 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.603186][ T29] audit: type=1400 audit(1722649969.891:91): avc: denied { relabelto } for pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.314702][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 26.339303][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 26.416473][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 26.445801][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.453247][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.460622][ T3261] bridge_slave_0: entered allmulticast mode [ 26.467059][ T3261] bridge_slave_0: entered promiscuous mode [ 26.475742][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.482880][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.489985][ T3258] bridge_slave_0: entered allmulticast mode [ 26.496432][ T3258] bridge_slave_0: entered promiscuous mode [ 26.505733][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.513162][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.521045][ T3258] bridge_slave_1: entered allmulticast mode [ 26.527444][ T3258] bridge_slave_1: entered promiscuous mode [ 26.542553][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.549774][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.556910][ T3261] bridge_slave_1: entered allmulticast mode [ 26.563381][ T3261] bridge_slave_1: entered promiscuous mode [ 26.579959][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.591796][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.609722][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 26.620211][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 26.634080][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.660321][ T3258] team0: Port device team_slave_0 added [ 26.666803][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.676753][ T3258] team0: Port device team_slave_1 added [ 26.720215][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.727295][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.753279][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.764397][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.771378][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.801354][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.812194][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.819344][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.826481][ T3264] bridge_slave_0: entered allmulticast mode [ 26.833031][ T3264] bridge_slave_0: entered promiscuous mode [ 26.839600][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.847355][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.855317][ T3264] bridge_slave_1: entered allmulticast mode [ 26.861741][ T3264] bridge_slave_1: entered promiscuous mode [ 26.868487][ T3261] team0: Port device team_slave_0 added [ 26.887463][ T3261] team0: Port device team_slave_1 added [ 26.898652][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.925556][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.942751][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.951079][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.958550][ T3265] bridge_slave_0: entered allmulticast mode [ 26.965132][ T3265] bridge_slave_0: entered promiscuous mode [ 26.981549][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.988522][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.014880][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.039855][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.046979][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.054218][ T3265] bridge_slave_1: entered allmulticast mode [ 27.060644][ T3265] bridge_slave_1: entered promiscuous mode [ 27.067401][ T3264] team0: Port device team_slave_0 added [ 27.073474][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.080455][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.106728][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.123998][ T3258] hsr_slave_0: entered promiscuous mode [ 27.130260][ T3258] hsr_slave_1: entered promiscuous mode [ 27.145480][ T3264] team0: Port device team_slave_1 added [ 27.158770][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.166913][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.174136][ T3259] bridge_slave_0: entered allmulticast mode [ 27.180765][ T3259] bridge_slave_0: entered promiscuous mode [ 27.187342][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.194461][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.201663][ T3259] bridge_slave_1: entered allmulticast mode [ 27.208137][ T3259] bridge_slave_1: entered promiscuous mode [ 27.215644][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.229440][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.236545][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.262792][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.283628][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.293505][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.302958][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.309905][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.338797][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.350976][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.389165][ T3259] team0: Port device team_slave_0 added [ 27.400868][ T3265] team0: Port device team_slave_0 added [ 27.407899][ T3265] team0: Port device team_slave_1 added [ 27.423934][ T3261] hsr_slave_0: entered promiscuous mode [ 27.429962][ T3261] hsr_slave_1: entered promiscuous mode [ 27.435821][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.443509][ T3261] Cannot create hsr debugfs directory [ 27.453390][ T3259] team0: Port device team_slave_1 added [ 27.480476][ T3264] hsr_slave_0: entered promiscuous mode [ 27.486813][ T3264] hsr_slave_1: entered promiscuous mode [ 27.492753][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.500325][ T3264] Cannot create hsr debugfs directory [ 27.513025][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.520008][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.546056][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.579668][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.586630][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.612540][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.626328][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.633550][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.661906][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.673252][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.680324][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.706329][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.748031][ T3259] hsr_slave_0: entered promiscuous mode [ 27.754079][ T3259] hsr_slave_1: entered promiscuous mode [ 27.760091][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.767705][ T3259] Cannot create hsr debugfs directory [ 27.802378][ T3265] hsr_slave_0: entered promiscuous mode [ 27.808389][ T3265] hsr_slave_1: entered promiscuous mode [ 27.814161][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.824343][ T3265] Cannot create hsr debugfs directory [ 27.915465][ T3258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.938809][ T3258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.958505][ T3258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.975618][ T3258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.996719][ T3264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.009016][ T3264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.021414][ T3264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.033816][ T3264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.057840][ T3261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.070095][ T3261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.079664][ T3261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.088262][ T3261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.108720][ T3259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.125903][ T3259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.135280][ T3259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.146469][ T3259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.189400][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.198386][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.212379][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.221983][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.233689][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.253811][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.271905][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.284989][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.292141][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.301622][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.308808][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.345900][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.360761][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.377909][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.385027][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.398431][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.410458][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.441794][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.449720][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.461408][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.468614][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.483590][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.490756][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.526871][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.537396][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.553574][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.564808][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.580870][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.603158][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.613587][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.633348][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.643946][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.675395][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.692418][ T3265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.702962][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.715627][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.722877][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.735911][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.742978][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.753524][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.760654][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.858616][ T3264] veth0_vlan: entered promiscuous mode [ 28.867973][ T3264] veth1_vlan: entered promiscuous mode [ 28.879059][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.894467][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.907138][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.920098][ T3264] veth0_macvtap: entered promiscuous mode [ 28.934212][ T3264] veth1_macvtap: entered promiscuous mode [ 28.985653][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.001334][ T3261] veth0_vlan: entered promiscuous mode [ 29.023873][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.034769][ T3261] veth1_vlan: entered promiscuous mode [ 29.048743][ T3261] veth0_macvtap: entered promiscuous mode [ 29.062297][ T3264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.071227][ T3264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.080061][ T3264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.088863][ T3264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.106580][ T3261] veth1_macvtap: entered promiscuous mode [ 29.127984][ T3258] veth0_vlan: entered promiscuous mode [ 29.138858][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.151929][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.162803][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.172290][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.182831][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.193957][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.206787][ T3258] veth1_vlan: entered promiscuous mode [ 29.213488][ T3261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.222289][ T3261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.231125][ T3261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.239833][ T3261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.253671][ T3265] veth0_vlan: entered promiscuous mode [ 29.268085][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 29.268097][ T29] audit: type=1400 audit(1722649974.631:110): avc: denied { mounton } for pid=3264 comm="syz-executor" path="/root/syzkaller.yWGiHT/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.270916][ T3265] veth1_vlan: entered promiscuous mode [ 29.274499][ T29] audit: type=1400 audit(1722649974.631:111): avc: denied { mount } for pid=3264 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.305455][ T3258] veth0_macvtap: entered promiscuous mode [ 29.329104][ T29] audit: type=1400 audit(1722649974.631:112): avc: denied { mounton } for pid=3264 comm="syz-executor" path="/root/syzkaller.yWGiHT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.338179][ T3258] veth1_macvtap: entered promiscuous mode [ 29.359909][ T29] audit: type=1400 audit(1722649974.631:113): avc: denied { mount } for pid=3264 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.387595][ T29] audit: type=1400 audit(1722649974.631:114): avc: denied { unmount } for pid=3264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.409384][ T29] audit: type=1400 audit(1722649974.731:115): avc: denied { mounton } for pid=3264 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.434531][ T3259] veth0_vlan: entered promiscuous mode [ 29.448346][ T29] audit: type=1400 audit(1722649974.811:116): avc: denied { read write } for pid=3264 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.454305][ T3259] veth1_vlan: entered promiscuous mode [ 29.474201][ T29] audit: type=1400 audit(1722649974.811:117): avc: denied { open } for pid=3264 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.500727][ T3259] veth0_macvtap: entered promiscuous mode [ 29.503787][ T29] audit: type=1400 audit(1722649974.811:118): avc: denied { ioctl } for pid=3264 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.545613][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.556193][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.567501][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.577937][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.591784][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.599630][ T29] audit: type=1400 audit(1722649974.961:119): avc: denied { write } for pid=3400 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 29.603067][ T3265] veth0_macvtap: entered promiscuous mode [ 29.631003][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.641598][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.651424][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.663439][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.674672][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.684997][ T3265] veth1_macvtap: entered promiscuous mode [ 29.693512][ T3259] veth1_macvtap: entered promiscuous mode [ 29.708472][ T3410] loop4: detected capacity change from 0 to 128 [ 29.709876][ T3258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.723640][ T3258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.732533][ T3258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.741308][ T3258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.750161][ T3410] ======================================================= [ 29.750161][ T3410] WARNING: The mand mount option has been deprecated and [ 29.750161][ T3410] and is ignored by this kernel. Remove the mand [ 29.750161][ T3410] option from the mount to silence this warning. [ 29.750161][ T3410] ======================================================= [ 29.753086][ T3412] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.816167][ T3410] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.819604][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.838480][ T3412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65043 sclass=netlink_route_socket pid=3412 comm=syz.1.7 [ 29.842983][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.865511][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.876054][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.876407][ T3410] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.885919][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.885937][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.922373][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.931978][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.942565][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.952427][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.962923][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.972925][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.983357][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.993195][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.007214][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.018980][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.029340][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.039884][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.050085][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.060530][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.070330][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.080840][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.095586][ T3261] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.105882][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.118197][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.129766][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.139339][ T3421] loop1: detected capacity change from 0 to 128 [ 30.139629][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.156306][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.166161][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.176777][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.187151][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.197713][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.209879][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.218365][ T3259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.227194][ T3259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.235965][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.248077][ T3259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.260025][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.262572][ T3425] loop4: detected capacity change from 0 to 512 [ 30.268804][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.268853][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.268881][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.308106][ T3425] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.309622][ T3431] usb usb8: usbfs: process 3431 (syz.1.12) did not claim interface 0 before use [ 30.321179][ T3425] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.331070][ T3425] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.354796][ T3425] EXT4-fs (loop4): 1 truncate cleaned up [ 30.361072][ T3425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.464674][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.531124][ T3454] capability: warning: `syz.2.18' uses 32-bit capabilities (legacy support in use) [ 30.552745][ T3454] loop2: detected capacity change from 0 to 1024 [ 30.579476][ T3459] loop0: detected capacity change from 0 to 512 [ 30.594719][ T3459] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 30.625011][ T3459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 30.635013][ T3459] EXT4-fs (loop0): orphan cleanup on readonly fs [ 30.645560][ T3459] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.16: bg 0: block 361: padding at end of block bitmap is not set [ 30.663839][ T3459] EXT4-fs (loop0): Remounting filesystem read-only [ 30.678117][ T3466] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 30.684701][ T3459] EXT4-fs (loop0): 1 truncate cleaned up [ 30.690866][ T3459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 30.703184][ T3459] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 30.716327][ T3459] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 30.730879][ T3468] pim6reg1: entered promiscuous mode [ 30.736286][ T3468] pim6reg1: entered allmulticast mode [ 30.821703][ T3449] syz.0.16 (3449) used greatest stack depth: 10808 bytes left [ 30.852432][ T3476] dccp_close: ABORT with 32 bytes unread [ 30.877342][ T3478] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.943632][ T3486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 30.955220][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 31.009178][ T3491] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 31.038390][ T3491] netlink: 'syz.0.30': attribute type 27 has an invalid length. [ 31.094355][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.101621][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.150652][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.162116][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.236161][ T3491] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.245340][ T3491] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.254474][ T3491] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.263483][ T3491] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.287538][ T3512] batman_adv: batadv0: Adding interface: macvtap1 [ 31.294012][ T3512] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.319801][ T3512] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 31.332776][ T3509] IPv6: Can't replace route, no match found [ 31.451377][ T3527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 31.530367][ T3533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.38'. [ 31.546015][ T3534] loop2: detected capacity change from 0 to 512 [ 31.571550][ T3534] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.36: bad orphan inode 15 [ 31.582093][ T3534] ext4_test_bit(bit=14, block=5) = 0 [ 31.589601][ T3534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.620298][ T3542] loop4: detected capacity change from 0 to 1024 [ 31.627758][ T3542] EXT4-fs: Ignoring removed orlov option [ 31.635463][ T3542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.648697][ T3542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.672521][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.765574][ T3553] loop4: detected capacity change from 0 to 8192 [ 31.807290][ T3553] loop4: p3 p4 [ 31.810945][ T3553] loop4: p3 start 458783 is beyond EOD, truncated [ 31.817540][ T3553] loop4: p4 size 65536 extends beyond EOD, truncated [ 31.872909][ T3555] loop4: detected capacity change from 0 to 8192 [ 31.937394][ T3555] loop4: detected capacity change from 0 to 512 [ 31.978075][ T3559] loop4: detected capacity change from 0 to 512 [ 31.999297][ T3559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.012037][ T3559] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.036250][ T3559] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 32.050828][ T3559] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 89 with error 28 [ 32.066378][ T3559] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.066378][ T3559] [ 32.076055][ T3559] EXT4-fs (loop4): Total free blocks count 0 [ 32.082081][ T3559] EXT4-fs (loop4): Free/Dirty block details [ 32.088011][ T3559] EXT4-fs (loop4): free_blocks=65280 [ 32.093394][ T3559] EXT4-fs (loop4): dirty_blocks=89 [ 32.098533][ T3559] EXT4-fs (loop4): Block reservation details [ 32.104522][ T3559] EXT4-fs (loop4): i_reserved_data_blocks=89 [ 32.114409][ T3559] syz.4.47 (3559) used greatest stack depth: 10008 bytes left [ 32.123658][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.238736][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 32.328771][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.368598][ T3592] program syz.1.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.378064][ T3591] Cannot find add_set index 0 as target [ 32.399653][ T3591] loop4: detected capacity change from 0 to 1024 [ 32.411703][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 32.415608][ T3595] FAULT_INJECTION: forcing a failure. [ 32.415608][ T3595] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.422737][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.437805][ T3595] CPU: 0 UID: 0 PID: 3595 Comm: syz.2.59 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 32.455435][ T3591] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 32.460710][ T3595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 32.460742][ T3595] Call Trace: [ 32.460750][ T3595] [ 32.460757][ T3595] dump_stack_lvl+0xf2/0x150 [ 32.460788][ T3595] dump_stack+0x15/0x20 [ 32.469141][ T3591] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 32.470291][ T3591] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 32.479239][ T3595] should_fail_ex+0x229/0x230 [ 32.479271][ T3595] should_fail+0xb/0x10 [ 32.479295][ T3595] should_fail_usercopy+0x1a/0x20 [ 32.482583][ T3591] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.482583][ T3591] [ 32.485471][ T3595] _copy_from_user+0x1e/0xd0 [ 32.490084][ T3591] EXT4-fs (loop4): Total free blocks count 0 [ 32.494169][ T3595] do_replace+0x7b/0x2d0 [ 32.503031][ T3591] EXT4-fs (loop4): Free/Dirty block details [ 32.515293][ T3595] do_ebt_set_ctl+0x1bd/0xb80 [ 32.515320][ T3595] ? _parse_integer_limit+0x167/0x180 [ 32.515338][ T3595] ? _parse_integer+0x27/0x30 [ 32.515389][ T3595] ? kstrtoull+0x110/0x140 [ 32.515452][ T3595] ? tcp_release_cb+0xfe/0x380 [ 32.520192][ T3591] EXT4-fs (loop4): free_blocks=68451041280 [ 32.524300][ T3595] ? _raw_spin_unlock_bh+0x36/0x40 [ 32.529316][ T3591] EXT4-fs (loop4): dirty_blocks=32 [ 32.539583][ T3595] ? release_sock+0x117/0x150 [ 32.539609][ T3595] ? sockopt_release_sock+0x42/0x50 [ 32.544787][ T3591] EXT4-fs (loop4): Block reservation details [ 32.550798][ T3595] ? do_ip_setsockopt+0x1fcf/0x2340 [ 32.550827][ T3595] nf_setsockopt+0x195/0x1b0 [ 32.555062][ T3591] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 32.561032][ T3595] ip_setsockopt+0xea/0x100 [ 32.640306][ T3595] tcp_setsockopt+0x93/0xb0 [ 32.640336][ T3595] sock_common_setsockopt+0x64/0x80 [ 32.640426][ T3595] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 32.640466][ T3595] __sys_setsockopt+0x1d8/0x250 [ 32.640486][ T3595] __x64_sys_setsockopt+0x66/0x80 [ 32.640505][ T3595] x64_sys_call+0x278d/0x2d60 [ 32.640526][ T3595] do_syscall_64+0xc9/0x1c0 [ 32.640626][ T3595] ? clear_bhb_loop+0x55/0xb0 [ 32.640648][ T3595] ? clear_bhb_loop+0x55/0xb0 [ 32.640668][ T3595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.640699][ T3595] RIP: 0033:0x7f3b401879f9 [ 32.640712][ T3595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.640785][ T3595] RSP: 002b:00007f3b3ee07048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 32.640801][ T3595] RAX: ffffffffffffffda RBX: 00007f3b40315f80 RCX: 00007f3b401879f9 [ 32.640812][ T3595] RDX: 0000000000000080 RSI: 0a00000000000000 RDI: 000000000000000b [ 32.640822][ T3595] RBP: 00007f3b3ee070a0 R08: 0000000000000a08 R09: 0000000000000000 [ 32.640836][ T3595] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 32.640871][ T3595] R13: 000000000000000b R14: 00007f3b40315f80 R15: 00007ffdb3c1a838 [ 32.640884][ T3595] [ 32.667696][ T3261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.764685][ T3605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3605 comm=syz.1.64 [ 32.808272][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.842698][ T3609] sg_write: process 45 (syz.1.65) changed security contexts after opening file descriptor, this is not allowed. [ 32.872533][ T3607] Zero length message leads to an empty skb [ 32.905648][ T3621] loop2: detected capacity change from 0 to 128 [ 32.912961][ T3621] vfat: Unknown parameter '017777777777777777777770xffffffffffffffffÿÿ0x0000000000000000ÿ' [ 32.937514][ T3621] loop2: detected capacity change from 0 to 1024 [ 32.947924][ T3625] loop4: detected capacity change from 0 to 512 [ 32.955105][ T3625] EXT4-fs: Ignoring removed i_version option [ 32.970246][ T3625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 32.984968][ T3625] System zones: 1-12 [ 32.996593][ T3625] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.72: bg 0: block 131: padding at end of block bitmap is not set [ 32.996821][ T3625] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 33.027641][ T3625] EXT4-fs (loop4): 1 truncate cleaned up [ 33.037227][ T3625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.118175][ T3632] loop1: detected capacity change from 0 to 1024 [ 33.129509][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.221114][ T3644] loop2: detected capacity change from 0 to 512 [ 33.231744][ T3644] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.243033][ T3644] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 33.258161][ T3644] EXT4-fs (loop2): 1 truncate cleaned up [ 33.264035][ T3644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.847666][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.886084][ T3649] Invalid logical block size (9) [ 33.957216][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.980399][ T3653] FAULT_INJECTION: forcing a failure. [ 33.980399][ T3653] name failslab, interval 1, probability 0, space 0, times 0 [ 33.993171][ T3653] CPU: 0 UID: 0 PID: 3653 Comm: syz.2.80 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 34.003806][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 34.013993][ T3653] Call Trace: [ 34.017276][ T3653] [ 34.020313][ T3653] dump_stack_lvl+0xf2/0x150 [ 34.025168][ T3653] dump_stack+0x15/0x20 [ 34.029934][ T3653] should_fail_ex+0x229/0x230 [ 34.040019][ T3653] ? sidtab_sid2str_get+0xb8/0x140 [ 34.045235][ T3653] should_failslab+0x8f/0xb0 [ 34.049883][ T3653] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 34.056886][ T3653] kmemdup_noprof+0x2a/0x60 [ 34.061397][ T3653] sidtab_sid2str_get+0xb8/0x140 [ 34.066383][ T3653] security_sid_to_context_core+0x1eb/0x2f0 [ 34.072391][ T3653] security_sid_to_context+0x27/0x30 [ 34.077842][ T3653] avc_audit_post_callback+0x9d/0x530 [ 34.083244][ T3653] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 34.089234][ T3653] common_lsm_audit+0x7d3/0xfc0 [ 34.094162][ T3653] ? avc_denied+0xf1/0x110 [ 34.098604][ T3653] slow_avc_audit+0xf9/0x140 [ 34.103282][ T3653] avc_has_perm+0x129/0x160 [ 34.107793][ T3653] selinux_mmap_file+0x153/0x1e0 [ 34.112743][ T3653] ? __pfx_selinux_mmap_file+0x10/0x10 [ 34.118229][ T3653] security_mmap_file+0x113/0x150 [ 34.123256][ T3653] vm_mmap_pgoff+0x90/0x290 [ 34.127774][ T3653] ksys_mmap_pgoff+0x292/0x340 [ 34.132758][ T3653] x64_sys_call+0x1884/0x2d60 [ 34.137539][ T3653] do_syscall_64+0xc9/0x1c0 [ 34.142051][ T3653] ? clear_bhb_loop+0x55/0xb0 [ 34.146739][ T3653] ? clear_bhb_loop+0x55/0xb0 [ 34.151470][ T3653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.157398][ T3653] RIP: 0033:0x7f3b401879f9 [ 34.162125][ T3653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.185015][ T3653] RSP: 002b:00007f3b3ee07048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 34.193553][ T3653] RAX: ffffffffffffffda RBX: 00007f3b40315f80 RCX: 00007f3b401879f9 [ 34.201533][ T3653] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 34.209509][ T3653] RBP: 00007f3b3ee070a0 R08: 0000000000000003 R09: 0000000100000000 [ 34.217559][ T3653] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 34.225540][ T3653] R13: 000000000000000b R14: 00007f3b40315f80 R15: 00007ffdb3c1a838 [ 34.233605][ T3653] [ 34.283752][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 34.283777][ T29] audit: type=1326 audit(1722649979.641:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff940fe79f9 code=0x7ffc0000 [ 34.313488][ T29] audit: type=1326 audit(1722649979.641:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff940fe79f9 code=0x7ffc0000 [ 34.358921][ T29] audit: type=1400 audit(1722649979.701:364): avc: denied { setopt } for pid=3659 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 34.382185][ T29] audit: type=1400 audit(1722649979.721:365): avc: denied { create } for pid=3658 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 34.406041][ T3662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 34.420927][ T3662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 34.442054][ T29] audit: type=1400 audit(1722649979.761:366): avc: denied { block_suspend } for pid=3658 comm="syz.1.84" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.464296][ T29] audit: type=1400 audit(1722649979.801:367): avc: denied { ioctl } for pid=3658 comm="syz.1.84" path="socket:[4401]" dev="sockfs" ino=4401 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 34.488925][ T29] audit: type=1326 audit(1722649979.801:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3671 comm="syz.2.85" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b401879f9 code=0x0 [ 34.583539][ T29] audit: type=1400 audit(1722649979.941:369): avc: denied { ioctl } for pid=3690 comm="syz.1.94" path="socket:[4428]" dev="sockfs" ino=4428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.678911][ T29] audit: type=1400 audit(1722649980.041:370): avc: denied { create } for pid=3707 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 34.700901][ T3709] delete_channel: no stack [ 34.728777][ T29] audit: type=1400 audit(1722649980.091:371): avc: denied { mount } for pid=3712 comm="syz.2.102" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 34.773880][ T3719] loop1: detected capacity change from 0 to 512 [ 34.786283][ T3719] loop1: detected capacity change from 0 to 128 [ 34.829006][ T3719] loop1: detected capacity change from 0 to 128 [ 34.958091][ T3731] loop1: detected capacity change from 0 to 512 [ 34.968913][ T3731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.981503][ T3731] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.000441][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.036954][ T3737] loop0: detected capacity change from 0 to 512 [ 35.045874][ T3737] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 35.056246][ T3737] EXT4-fs (loop0): invalid journal inode [ 35.062661][ T3737] EXT4-fs (loop0): can't get journal size [ 35.071207][ T3737] EXT4-fs (loop0): 1 truncate cleaned up [ 35.078176][ T3737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.123371][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 35.133913][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 35.143359][ T3740] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 35.302095][ T3742] FAULT_INJECTION: forcing a failure. [ 35.302095][ T3742] name failslab, interval 1, probability 0, space 0, times 0 [ 35.314787][ T3742] CPU: 1 UID: 0 PID: 3742 Comm: syz.1.113 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 35.325379][ T3742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 35.336996][ T3742] Call Trace: [ 35.340273][ T3742] [ 35.343196][ T3742] dump_stack_lvl+0xf2/0x150 [ 35.347798][ T3742] dump_stack+0x15/0x20 [ 35.352119][ T3742] should_fail_ex+0x229/0x230 [ 35.356801][ T3742] ? __alloc_skb+0x10b/0x310 [ 35.361389][ T3742] should_failslab+0x8f/0xb0 [ 35.365971][ T3742] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 35.371826][ T3742] ? _copy_from_iter+0x161/0xb00 [ 35.376818][ T3742] __alloc_skb+0x10b/0x310 [ 35.381225][ T3742] ? skb_put+0xba/0x100 [ 35.385425][ T3742] tipc_buf_acquire+0x2c/0xb0 [ 35.390250][ T3742] tipc_msg_build+0x557/0x820 [ 35.394922][ T3742] tipc_send_group_bcast+0x5b9/0x6c0 [ 35.400339][ T3742] ? __pfx_woken_wake_function+0x10/0x10 [ 35.405976][ T3742] __tipc_sendmsg+0x18d/0x1c30 [ 35.410772][ T3742] __tipc_sendstream+0xa2b/0xb20 [ 35.415701][ T3742] ? avc_has_perm+0xd4/0x160 [ 35.420287][ T3742] ? selinux_socket_sendmsg+0x182/0x1b0 [ 35.425860][ T3742] ? _raw_spin_unlock_bh+0x36/0x40 [ 35.430985][ T3742] ? lock_sock_nested+0x10f/0x140 [ 35.436021][ T3742] ? __pfx_tipc_send_packet+0x10/0x10 [ 35.441489][ T3742] tipc_send_packet+0x65/0x80 [ 35.449240][ T3742] __sock_sendmsg+0x140/0x180 [ 35.454361][ T3742] ____sys_sendmsg+0x312/0x410 [ 35.459206][ T3742] __sys_sendmsg+0x1e9/0x280 [ 35.463857][ T3742] __x64_sys_sendmsg+0x46/0x50 [ 35.468763][ T3742] x64_sys_call+0x2689/0x2d60 [ 35.473600][ T3742] do_syscall_64+0xc9/0x1c0 [ 35.478295][ T3742] ? clear_bhb_loop+0x55/0xb0 [ 35.483060][ T3742] ? clear_bhb_loop+0x55/0xb0 [ 35.487844][ T3742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.493729][ T3742] RIP: 0033:0x7f2e15cd79f9 [ 35.498233][ T3742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.518525][ T3742] RSP: 002b:00007f2e14957048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.527014][ T3742] RAX: ffffffffffffffda RBX: 00007f2e15e65f80 RCX: 00007f2e15cd79f9 [ 35.535209][ T3742] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000007 [ 35.543351][ T3742] RBP: 00007f2e149570a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.551381][ T3742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 35.559463][ T3742] R13: 000000000000004d R14: 00007f2e15e65f80 R15: 00007ffe8ece9da8 [ 35.559488][ T3742] [ 35.665623][ T3760] loop2: detected capacity change from 0 to 2048 [ 35.678601][ T3762] loop3: detected capacity change from 0 to 128 [ 35.679361][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.697945][ T3762] FAT-fs (loop3): bogus number of reserved sectors [ 35.703677][ T3765] dccp_close: ABORT with 32 bytes unread [ 35.704499][ T3762] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 35.719970][ T3762] FAT-fs (loop3): Can't find a valid FAT filesystem [ 35.760154][ T3773] loop1: detected capacity change from 0 to 512 [ 35.780401][ T3773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.794598][ T3773] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.814344][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.814617][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.867672][ T3783] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 36.004994][ T3790] program syz.1.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.034044][ T3790] __nla_validate_parse: 2 callbacks suppressed [ 36.034061][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 36.054416][ T3793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12048 sclass=netlink_route_socket pid=3793 comm=syz.2.128 [ 36.075777][ T3795] loop1: detected capacity change from 0 to 2048 [ 36.088926][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.102287][ T3795] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.129: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 255(4), depth 0(0) [ 36.125878][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.241497][ T3807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'. [ 36.253507][ T3807] ip6gretap1: entered allmulticast mode [ 36.321013][ T3809] 9pnet_fd: Insufficient options for proto=fd [ 36.333623][ T3809] loop1: detected capacity change from 0 to 512 [ 36.344766][ T3809] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.368983][ T3809] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.130: bg 0: block 64: padding at end of block bitmap is not set [ 36.384628][ T3809] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.130: Failed to acquire dquot type 0 [ 36.396394][ T3809] EXT4-fs (loop1): 1 truncate cleaned up [ 36.403519][ T3809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.610044][ T3814] lo speed is unknown, defaulting to 1000 [ 36.615881][ T3814] lo speed is unknown, defaulting to 1000 [ 36.622105][ T3814] lo speed is unknown, defaulting to 1000 [ 36.628692][ T3814] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.636479][ T3814] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 36.647505][ T3814] lo speed is unknown, defaulting to 1000 [ 36.656778][ T3814] lo speed is unknown, defaulting to 1000 [ 36.663078][ T3814] lo speed is unknown, defaulting to 1000 [ 36.670115][ T3814] lo speed is unknown, defaulting to 1000 [ 36.676132][ T3814] lo speed is unknown, defaulting to 1000 [ 36.707941][ T3816] loop3: detected capacity change from 0 to 512 [ 36.728648][ T3816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.741475][ T3816] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.778626][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.821174][ T3809] syz.1.130 (3809) used greatest stack depth: 9400 bytes left [ 36.844917][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.907439][ T3828] loop1: detected capacity change from 0 to 256 [ 36.929937][ T3828] lo speed is unknown, defaulting to 1000 [ 36.994778][ T3264] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 37.003052][ T3264] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 37.129901][ T3839] loop2: detected capacity change from 0 to 512 [ 37.192149][ T3844] loop2: detected capacity change from 0 to 2048 [ 37.192162][ T3834] lo speed is unknown, defaulting to 1000 [ 37.206721][ T3844] EXT4-fs: Ignoring removed bh option [ 37.212420][ T3844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.219331][ T3844] EXT4-fs: Ignoring removed nobh option [ 37.229461][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.250385][ T3834] chnl_net:caif_netlink_parms(): no params data found [ 37.259994][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.292937][ T3834] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.300084][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.307532][ T3834] bridge_slave_0: entered allmulticast mode [ 37.307955][ T3862] Cannot find add_set index 0 as target [ 37.313945][ T3834] bridge_slave_0: entered promiscuous mode [ 37.326088][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.333418][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.341540][ T3834] bridge_slave_1: entered allmulticast mode [ 37.345408][ T3864] loop2: detected capacity change from 0 to 512 [ 37.348137][ T3834] bridge_slave_1: entered promiscuous mode [ 37.357685][ T3864] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 37.373230][ T3864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 37.381622][ T3864] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.389027][ T3864] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.148: bg 0: block 361: padding at end of block bitmap is not set [ 37.390876][ T3834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.403620][ T3864] EXT4-fs (loop2): Remounting filesystem read-only [ 37.413889][ T3834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.429756][ T3864] EXT4-fs (loop2): 1 truncate cleaned up [ 37.435818][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 37.448252][ T3864] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 37.449890][ T3834] team0: Port device team_slave_0 added [ 37.455040][ T3864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 37.461675][ T3834] team0: Port device team_slave_1 added [ 37.491504][ T3834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.498913][ T3834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.526058][ T3834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.537592][ T3834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.544628][ T3834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.570808][ T3834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.600710][ T3834] hsr_slave_0: entered promiscuous mode [ 37.609034][ T3834] hsr_slave_1: entered promiscuous mode [ 37.611622][ T3870] loop2: detected capacity change from 0 to 512 [ 37.620945][ T3834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.628845][ T3834] Cannot create hsr debugfs directory [ 37.630291][ T3870] EXT4-fs: Invalid want_extra_isize 2 [ 37.694445][ T3834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.723537][ T3877] raw_sendmsg: syz.2.151 forgot to set AF_INET. Fix it! [ 37.757479][ T3834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.808259][ T3834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.829811][ T3887] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 37.857787][ T3889] loop3: detected capacity change from 0 to 512 [ 37.870524][ T3834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.880728][ T3889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.893643][ T3889] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.916371][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.952150][ T3893] loop2: detected capacity change from 0 to 512 [ 37.961430][ T3834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.971763][ T3834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.978323][ T3893] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2812: inode #11: comm syz.2.158: corrupted xattr block 95: invalid header [ 37.994680][ T3834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.001830][ T3893] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.158: bg 0: block 7: invalid block bitmap [ 38.017930][ T3893] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 38.018785][ T3834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.027795][ T3893] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2978: inode #11: comm syz.2.158: corrupted xattr block 95: invalid header [ 38.049378][ T3893] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -117) [ 38.060737][ T3893] EXT4-fs (loop2): 1 orphan inode deleted [ 38.067294][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.067792][ T3893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.074454][ T3834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.088324][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.093734][ T3834] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.109664][ T3834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.145753][ T3902] loop3: detected capacity change from 0 to 1024 [ 38.159039][ T3902] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 38.185536][ T3834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.202949][ T3902] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 38.228196][ T3902] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 38.244505][ T3902] xt_NFQUEUE: number of total queues is 0 [ 38.252320][ T3834] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.260483][ T3902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3902 comm=syz.3.162 [ 38.276838][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.285127][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.315078][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.322255][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.339885][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.346985][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.355987][ T3258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.420681][ T3834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.461488][ T3918] netlink: 'syz.2.165': attribute type 2 has an invalid length. [ 38.527616][ T3834] veth0_vlan: entered promiscuous mode [ 38.536764][ T3834] veth1_vlan: entered promiscuous mode [ 38.556864][ T3834] veth0_macvtap: entered promiscuous mode [ 38.571901][ T3834] veth1_macvtap: entered promiscuous mode [ 38.595417][ T3929] loop0: detected capacity change from 0 to 164 [ 38.608612][ T3834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.619219][ T3834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.619240][ T3834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.619253][ T3834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.619262][ T3834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.619273][ T3834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.619283][ T3834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.619293][ T3834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.621334][ T3834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.706529][ T3834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.717124][ T3834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.726939][ T3834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.737675][ T3834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.747836][ T3834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.758575][ T3834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.768493][ T3834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.779325][ T3834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.790360][ T3834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.800944][ T50] bridge_slave_1: left allmulticast mode [ 38.806626][ T50] bridge_slave_1: left promiscuous mode [ 38.812664][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.821808][ T50] bridge_slave_0: left allmulticast mode [ 38.829960][ T50] bridge_slave_0: left promiscuous mode [ 38.835825][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.861340][ C0] hrtimer: interrupt took 30435 ns [ 38.939077][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.951139][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.961130][ T50] bond0 (unregistering): Released all slaves [ 38.969984][ T3834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.978730][ T3834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.987448][ T3834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.996183][ T3834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.039090][ T3943] loop1: detected capacity change from 0 to 1024 [ 39.045855][ T3943] EXT4-fs: Ignoring removed orlov option [ 39.051627][ T3943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.068480][ T50] IPVS: stopping master sync thread 3740 ... [ 39.069590][ T3943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.087877][ T50] hsr_slave_0: left promiscuous mode [ 39.093784][ T50] hsr_slave_1: left promiscuous mode [ 39.099154][ T3335] kernel write not supported for file /2/attr/keycreate (pid: 3335 comm: kworker/1:3) [ 39.105386][ T3943] process 'syz.1.143' launched './file0/file0' with NULL argv: empty string added [ 39.118402][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.125956][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.135996][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.143472][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.154730][ T50] veth1_macvtap: left promiscuous mode [ 39.160742][ T50] veth0_macvtap: left promiscuous mode [ 39.167578][ T50] veth1_vlan: left promiscuous mode [ 39.173123][ T50] veth0_vlan: left promiscuous mode [ 39.216402][ T3834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.248481][ T3950] loop1: detected capacity change from 0 to 1024 [ 39.258891][ T3950] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 39.268562][ T50] team0 (unregistering): Port device team_slave_1 removed [ 39.281490][ T50] team0 (unregistering): Port device team_slave_0 removed [ 39.316068][ T3948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 39.691377][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 39.691391][ T29] audit: type=1400 audit(1722649985.051:524): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.778604][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 39.800273][ T3974] loop2: detected capacity change from 0 to 256 [ 39.826701][ T3977] loop1: detected capacity change from 0 to 128 [ 39.839193][ T3974] lo speed is unknown, defaulting to 1000 [ 39.864632][ T3979] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 39.879017][ T3979] loop1: detected capacity change from 0 to 512 [ 39.898731][ T3979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.912523][ T3979] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.927099][ T3979] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 589824 out of range 0-6 [ 39.937693][ T3979] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 39.948468][ T3979] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.183: Failed to acquire dquot type 1 [ 39.963414][ T3979] Quota error (device loop1): do_check_range: Getting block 1541 out of range 1-6 [ 39.973110][ T3979] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 39.982834][ T3979] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.183: Failed to acquire dquot type 1 [ 39.995271][ T3258] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 40.003598][ T3258] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 40.029000][ T3834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.048391][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.057479][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.071784][ T29] audit: type=1400 audit(1722649985.431:525): avc: denied { read } for pid=3987 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.176355][ T29] audit: type=1400 audit(1722649985.531:526): avc: denied { read } for pid=4004 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.214833][ T4007] loop3: detected capacity change from 0 to 256 [ 40.220314][ T4009] syz.1.194[4009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.221219][ T4009] syz.1.194[4009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.305474][ T4010] lo speed is unknown, defaulting to 1000 [ 40.444911][ T29] audit: type=1400 audit(1722649985.801:527): avc: denied { setopt } for pid=4008 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.553155][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.672496][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.698629][ T3259] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 40.709293][ T3259] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 40.751504][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.769445][ T4012] bond0: (slave syz_tun): Releasing backup interface [ 40.792600][ T40] batman_adv: batadv0: Removing interface: macvtap1 [ 40.801214][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.820064][ T4015] lo speed is unknown, defaulting to 1000 [ 40.878732][ T4015] chnl_net:caif_netlink_parms(): no params data found [ 40.903263][ T29] audit: type=1400 audit(1722649986.261:528): avc: denied { search } for pid=2998 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.926295][ T29] audit: type=1400 audit(1722649986.291:529): avc: denied { read } for pid=2998 comm="dhcpcd" name="n25" dev="tmpfs" ino=1568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.960064][ T40] bridge_slave_1: left allmulticast mode [ 40.966397][ T40] bridge_slave_1: left promiscuous mode [ 40.972089][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.981389][ T40] bridge_slave_0: left allmulticast mode [ 40.987115][ T40] bridge_slave_0: left promiscuous mode [ 40.992816][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.129552][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.140081][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.150577][ T40] bond0 (unregistering): Released all slaves [ 41.165193][ T4015] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.174208][ T4015] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.183384][ T4015] bridge_slave_0: entered allmulticast mode [ 41.190163][ T4015] bridge_slave_0: entered promiscuous mode [ 41.200346][ T4015] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.207660][ T4015] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.220133][ T4015] bridge_slave_1: entered allmulticast mode [ 41.226704][ T4015] bridge_slave_1: entered promiscuous mode [ 41.251848][ T4015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.263362][ T4027] lo speed is unknown, defaulting to 1000 [ 41.268477][ T4015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.304836][ T4015] team0: Port device team_slave_0 added [ 41.313519][ T40] hsr_slave_0: left promiscuous mode [ 41.320276][ T40] hsr_slave_1: left promiscuous mode [ 41.328171][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.335687][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.343841][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.351432][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.362380][ T40] veth1_macvtap: left promiscuous mode [ 41.368008][ T40] veth0_macvtap: left promiscuous mode [ 41.373702][ T40] veth1_vlan: left promiscuous mode [ 41.378989][ T40] veth0_vlan: left promiscuous mode [ 41.452285][ T40] team0 (unregistering): Port device team_slave_1 removed [ 41.463239][ T40] team0 (unregistering): Port device team_slave_0 removed [ 41.502781][ T4015] team0: Port device team_slave_1 added [ 41.510287][ T4069] tun0: tun_chr_ioctl cmd 1074025677 [ 41.516158][ T4069] tun0: linktype set to 769 [ 41.537663][ T4074] syzkaller0: entered promiscuous mode [ 41.543175][ T4074] syzkaller0: entered allmulticast mode [ 41.565162][ T4015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.572523][ T4015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.600386][ T4015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.614492][ T4015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.621556][ T4015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.647588][ T4015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.680913][ T4015] hsr_slave_0: entered promiscuous mode [ 41.687546][ T4015] hsr_slave_1: entered promiscuous mode [ 41.742204][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 41.826153][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.833343][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.845923][ T4027] bridge_slave_0: entered allmulticast mode [ 41.856073][ T4027] bridge_slave_0: entered promiscuous mode [ 41.887209][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.894292][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.902006][ T4027] bridge_slave_1: entered allmulticast mode [ 41.905428][ T4103] loop0: detected capacity change from 0 to 256 [ 41.909173][ T4027] bridge_slave_1: entered promiscuous mode [ 41.955955][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.970331][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.992767][ T4103] lo speed is unknown, defaulting to 1000 [ 42.014048][ T4027] team0: Port device team_slave_0 added [ 42.035743][ T4027] team0: Port device team_slave_1 added [ 42.062007][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.069005][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.094984][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.106220][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.113325][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.139429][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.169932][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.198065][ T3265] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 42.219655][ T3265] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 42.230152][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.243752][ T4027] hsr_slave_0: entered promiscuous mode [ 42.252046][ T4027] hsr_slave_1: entered promiscuous mode [ 42.258591][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.266194][ T4027] Cannot create hsr debugfs directory [ 42.290902][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.310225][ T4015] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.321155][ T4015] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.333898][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.346680][ T4015] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.363740][ T4015] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.476943][ T4015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.512903][ T4015] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.522984][ T40] bridge_slave_1: left allmulticast mode [ 42.528726][ T40] bridge_slave_1: left promiscuous mode [ 42.534482][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.547734][ T40] bridge_slave_0: left allmulticast mode [ 42.558660][ T40] bridge_slave_0: left promiscuous mode [ 42.564361][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.699254][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.709367][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.719539][ T40] bond0 (unregistering): Released all slaves [ 42.741788][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.751687][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.760516][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.767605][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.836768][ T4131] lo speed is unknown, defaulting to 1000 [ 42.876378][ T4015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.889188][ T40] hsr_slave_0: left promiscuous mode [ 42.894901][ T40] hsr_slave_1: left promiscuous mode [ 42.901487][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.908960][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.916703][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.924239][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.933520][ T40] veth1_macvtap: left promiscuous mode [ 42.939141][ T40] veth0_macvtap: left promiscuous mode [ 42.944720][ T40] veth1_vlan: left promiscuous mode [ 42.951421][ T40] veth0_vlan: left promiscuous mode [ 43.022330][ T40] team0 (unregistering): Port device team_slave_1 removed [ 43.033420][ T40] team0 (unregistering): Port device team_slave_0 removed [ 43.079981][ T3493] lo speed is unknown, defaulting to 1000 [ 43.120634][ T4131] chnl_net:caif_netlink_parms(): no params data found [ 43.198042][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.205134][ T4131] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.214474][ T4131] bridge_slave_0: entered allmulticast mode [ 43.221348][ T4131] bridge_slave_0: entered promiscuous mode [ 43.229418][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.236491][ T4131] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.243983][ T4131] bridge_slave_1: entered allmulticast mode [ 43.250617][ T4131] bridge_slave_1: entered promiscuous mode [ 43.257484][ T4027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.268369][ T4027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.278429][ T4027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.301428][ T4131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.310783][ T4027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.320882][ T4131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.346065][ T4131] team0: Port device team_slave_0 added [ 43.352743][ T4131] team0: Port device team_slave_1 added [ 43.359550][ T4015] veth0_vlan: entered promiscuous mode [ 43.381048][ T4015] veth1_vlan: entered promiscuous mode [ 43.387963][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.395474][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.421845][ T4131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.433759][ T4131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.442590][ T4131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.470833][ T4131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.535628][ T4015] veth0_macvtap: entered promiscuous mode [ 43.545703][ T4131] hsr_slave_0: entered promiscuous mode [ 43.552927][ T4131] hsr_slave_1: entered promiscuous mode [ 43.559252][ T4131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.566846][ T4131] Cannot create hsr debugfs directory [ 43.575022][ T4015] veth1_macvtap: entered promiscuous mode [ 43.603032][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.613688][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.624769][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.635671][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.646468][ T4015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.656667][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.666915][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.677459][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.687878][ T4015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.699482][ T4015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.710525][ T4015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.729763][ T4015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.738531][ T4015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.747439][ T4015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.756233][ T4015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.773252][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.795499][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.802680][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.831449][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.838757][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.890351][ T4027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.957545][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 44.013608][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.020772][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.028735][ T4203] bridge_slave_0: entered allmulticast mode [ 44.035348][ T4203] bridge_slave_0: entered promiscuous mode [ 44.042417][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.049508][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.056922][ T4203] bridge_slave_1: entered allmulticast mode [ 44.064201][ T4203] bridge_slave_1: entered promiscuous mode [ 44.082469][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.102257][ T40] bridge_slave_1: left allmulticast mode [ 44.108289][ T40] bridge_slave_1: left promiscuous mode [ 44.114272][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.123235][ T40] bridge_slave_0: left allmulticast mode [ 44.129117][ T40] bridge_slave_0: left promiscuous mode [ 44.134968][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.190056][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.201090][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.210689][ T40] bond0 (unregistering): Released all slaves [ 44.222611][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.234034][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.249305][ T4230] syzkaller1: entered promiscuous mode [ 44.254869][ T4230] syzkaller1: entered allmulticast mode [ 44.279192][ T4203] team0: Port device team_slave_0 added [ 44.286089][ T4203] team0: Port device team_slave_1 added [ 44.301869][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.308874][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.335041][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.354752][ T4230] loop1: detected capacity change from 0 to 1024 [ 44.363022][ T40] hsr_slave_0: left promiscuous mode [ 44.365447][ T4230] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 44.377674][ T40] hsr_slave_1: left promiscuous mode [ 44.383280][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.391045][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.423446][ T40] team0 (unregistering): Port device team_slave_1 removed [ 44.434641][ T40] team0 (unregistering): Port device team_slave_0 removed [ 44.474300][ T4229] wireguard0: entered promiscuous mode [ 44.479887][ T4229] wireguard0: entered allmulticast mode [ 44.491138][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.498139][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.524324][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.564516][ T4203] hsr_slave_0: entered promiscuous mode [ 44.570791][ T4203] hsr_slave_1: entered promiscuous mode [ 44.576771][ T4203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.584367][ T4203] Cannot create hsr debugfs directory [ 44.646407][ T4027] veth0_vlan: entered promiscuous mode [ 44.688723][ T4027] veth1_vlan: entered promiscuous mode [ 44.723673][ T4131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.735015][ T4203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.751715][ T4131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.761610][ T4131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.770518][ T4131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.799271][ T4027] veth0_macvtap: entered promiscuous mode [ 44.831662][ T4203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.876791][ T4027] veth1_macvtap: entered promiscuous mode [ 44.911390][ T4203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.935999][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 44.949156][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.959662][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.973264][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.983807][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.993696][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.004191][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.015122][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.024995][ T4265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 45.039513][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.051383][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.062562][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.073328][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.083287][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.093876][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.105343][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.122645][ T4203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.141947][ T4027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.151252][ T4027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.160131][ T4027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.169109][ T4027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.206798][ T4131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.251283][ T4131] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.265835][ T4203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.274620][ T4203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.283217][ T4203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.293187][ T4203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.309380][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.316702][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.329154][ T4287] loop3: detected capacity change from 0 to 512 [ 45.336149][ T4287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.352900][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.353948][ T4287] EXT4-fs (loop3): 1 truncate cleaned up [ 45.360027][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.387513][ T4287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.404726][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.428282][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.440344][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.447571][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.466321][ T4299] loop2: detected capacity change from 0 to 512 [ 45.477423][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.479405][ T4299] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 45.484493][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.502392][ T4299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 45.510691][ T4299] System zones: 1-12 [ 45.514843][ T4299] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.532250][ T4299] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.225: Inode bitmap for bg 0 marked uninitialized [ 45.538737][ T4131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.545348][ T4299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.571594][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 45.571608][ T29] audit: type=1400 audit(1722649990.931:548): avc: denied { create } for pid=4298 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 45.597286][ T29] audit: type=1400 audit(1722649990.931:549): avc: denied { bind } for pid=4298 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 45.617109][ T4015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.634863][ T29] audit: type=1400 audit(1722649990.931:550): avc: denied { bind } for pid=4298 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.654571][ T29] audit: type=1400 audit(1722649990.931:551): avc: denied { node_bind } for pid=4298 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 45.681680][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.714240][ T4131] veth0_vlan: entered promiscuous mode [ 45.723321][ T4131] veth1_vlan: entered promiscuous mode [ 45.743347][ T4131] veth0_macvtap: entered promiscuous mode [ 45.753759][ T4131] veth1_macvtap: entered promiscuous mode [ 45.766602][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.777247][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.787225][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.797707][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.807656][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.818219][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.828072][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.839568][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.850733][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.860272][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 45.873744][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.884335][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.894333][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.904771][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.914601][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.925041][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.935524][ T4131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.946057][ T4131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.957515][ T4131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.970463][ T4131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.979666][ T4131] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.988657][ T4131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.997444][ T4131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.055249][ T4203] veth0_vlan: entered promiscuous mode [ 46.064178][ T4203] veth1_vlan: entered promiscuous mode [ 46.085283][ T4203] veth0_macvtap: entered promiscuous mode [ 46.094843][ T4203] veth1_macvtap: entered promiscuous mode [ 46.110404][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.121055][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.126745][ T4338] loop0: detected capacity change from 0 to 512 [ 46.131001][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.147677][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.157598][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.168176][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.178415][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.188995][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.198842][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.209301][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.224673][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.232402][ T4341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 46.242312][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.253425][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.263237][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.273706][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.283733][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.294163][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.304142][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.314578][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.324535][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.335244][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.347125][ T4027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.348171][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.371299][ T4340] netlink: 5 bytes leftover after parsing attributes in process `syz.0.231'. [ 46.380285][ T4340] 0ªX¹¦D: renamed from gretap0 (while UP) [ 46.391948][ T4340] 0ªX¹¦D: entered allmulticast mode [ 46.400704][ T4340] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 46.417084][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 46.427705][ T4203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.436520][ T4203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.445433][ T4203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.454600][ T4203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.465025][ T4344] lo speed is unknown, defaulting to 1000 [ 46.465957][ T4340] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.470911][ T4344] lo speed is unknown, defaulting to 1000 [ 46.492784][ T4344] lo speed is unknown, defaulting to 1000 [ 46.502810][ T4344] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 46.522632][ T4344] lo speed is unknown, defaulting to 1000 [ 46.530078][ T4344] lo speed is unknown, defaulting to 1000 [ 46.536245][ T4344] lo speed is unknown, defaulting to 1000 [ 46.544420][ T4344] lo speed is unknown, defaulting to 1000 [ 46.551202][ T4344] lo speed is unknown, defaulting to 1000 [ 46.557527][ T4344] lo speed is unknown, defaulting to 1000 [ 46.570884][ T4352] loop1: detected capacity change from 0 to 764 [ 46.641467][ T29] audit: type=1400 audit(1722649992.001:552): avc: denied { connect } for pid=4363 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.663821][ T29] audit: type=1400 audit(1722649992.021:553): avc: denied { write } for pid=4363 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.687934][ T4364] Illegal XDP return value 4294941914 on prog (id 106) dev N/A, expect packet loss! [ 46.699010][ T29] audit: type=1326 audit(1722649992.061:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4365 comm="syz.3.236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ddb5b79f9 code=0x0 [ 46.754819][ T4380] 9pnet_fd: Insufficient options for proto=fd [ 46.781182][ T4383] netlink: 844 bytes leftover after parsing attributes in process `syz.0.238'. [ 46.796526][ T4380] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 46.810814][ T4383] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 46.841526][ T4395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.240'. [ 46.845624][ T4393] netlink: 44 bytes leftover after parsing attributes in process `syz.4.240'. [ 46.905807][ T4405] loop2: detected capacity change from 0 to 512 [ 46.914413][ T29] audit: type=1400 audit(1722649992.271:555): avc: denied { unmount } for pid=4203 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 46.920616][ T4405] EXT4-fs: Ignoring removed bh option [ 46.950936][ T4405] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 46.981926][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 47.115497][ T29] audit: type=1400 audit(1722649992.471:556): avc: denied { shutdown } for pid=4440 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 47.230696][ T4463] loop2: detected capacity change from 0 to 512 [ 47.250250][ T4463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.263534][ T4463] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.487668][ T4511] loop3: detected capacity change from 0 to 256 [ 47.503959][ T29] audit: type=1400 audit(1722649992.861:557): avc: denied { mounton } for pid=4510 comm="syz.3.249" path="/3/file2/file0" dev="loop3" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 47.855198][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 47.938140][ T4573] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 47.970365][ T4575] loop0: detected capacity change from 0 to 128 [ 47.979682][ T4575] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 48.015787][ T4580] loop1: detected capacity change from 0 to 512 [ 48.022774][ T4580] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.039300][ T4580] EXT4-fs (loop1): 1 truncate cleaned up [ 48.045576][ T4580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.062362][ T4585] siw: device registration error -23 [ 48.068443][ T3834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.115628][ T4015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.168282][ T4589] loop0: detected capacity change from 0 to 8192 [ 48.204145][ T4591] loop2: detected capacity change from 0 to 256 [ 48.211420][ T4591] vfat: Unknown parameter '0¿\dôUðçîÕ%‹ìŽnr#W:šâ'A7rÙú<åsÉÅ 6*Ä' [ 48.251921][ T4598] loop2: detected capacity change from 0 to 128 [ 48.287111][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 48.297305][ T4604] loop2: detected capacity change from 0 to 128 [ 48.305926][ T4604] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.318661][ T4604] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.383472][ T4015] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.402555][ T4607] openvswitch: netlink: Port 285220524 exceeds max allowable 65535 [ 48.411108][ T4607] Cannot find add_set index 0 as target [ 48.481597][ T4610] loop2: detected capacity change from 0 to 256 [ 49.005583][ T4622] loop1: detected capacity change from 0 to 256 [ 49.068332][ T4631] FAULT_INJECTION: forcing a failure. [ 49.068332][ T4631] name failslab, interval 1, probability 0, space 0, times 0 [ 49.081242][ T4631] CPU: 1 UID: 0 PID: 4631 Comm: syz.1.269 Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 49.091900][ T4631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.101981][ T4631] Call Trace: [ 49.105251][ T4631] [ 49.108179][ T4631] dump_stack_lvl+0xf2/0x150 [ 49.112926][ T4631] dump_stack+0x15/0x20 [ 49.117105][ T4631] should_fail_ex+0x229/0x230 [ 49.121832][ T4631] ? __se_sys_mount+0xf7/0x2d0 [ 49.126601][ T4631] should_failslab+0x8f/0xb0 [ 49.131187][ T4631] __kmalloc_cache_noprof+0x4b/0x2a0 [ 49.136470][ T4631] __se_sys_mount+0xf7/0x2d0 [ 49.141061][ T4631] ? fput+0x13b/0x180 [ 49.145201][ T4631] ? ksys_write+0x178/0x1b0 [ 49.149771][ T4631] __x64_sys_mount+0x67/0x80 [ 49.154384][ T4631] x64_sys_call+0x203e/0x2d60 [ 49.159437][ T4631] do_syscall_64+0xc9/0x1c0 [ 49.167001][ T4631] ? clear_bhb_loop+0x55/0xb0 [ 49.171686][ T4631] ? clear_bhb_loop+0x55/0xb0 [ 49.176369][ T4631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.182268][ T4631] RIP: 0033:0x7f3b102679f9 [ 49.186726][ T4631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.206425][ T4631] RSP: 002b:00007f3b0eec6048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.214848][ T4631] RAX: ffffffffffffffda RBX: 00007f3b103f6058 RCX: 00007f3b102679f9 [ 49.222901][ T4631] RDX: 0000000020000480 RSI: 0000000020000100 RDI: 0000000000000000 [ 49.230864][ T4631] RBP: 00007f3b0eec60a0 R08: 0000000020000400 R09: 0000000000000000 [ 49.238922][ T4631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.247008][ T4631] R13: 000000000000006e R14: 00007f3b103f6058 R15: 00007fff23f19208 [ 49.255139][ T4631] [ 49.290645][ T4636] loop0: detected capacity change from 0 to 2048 [ 49.303736][ T4638] x_tables: duplicate underflow at hook 2 [ 49.312285][ T4636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.324443][ T4636] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.345524][ T4131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.358042][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.376748][ T4647] loop0: detected capacity change from 0 to 512 [ 49.391489][ T4647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.404398][ T4647] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.423246][ T4131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.480181][ T4658] loop0: detected capacity change from 0 to 8192 [ 49.507436][ T4659] loop2: detected capacity change from 0 to 512 [ 49.515533][ T4659] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.281: casefold flag without casefold feature [ 49.528399][ T4659] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.281: couldn't read orphan inode 15 (err -117) [ 49.528766][ T4658] loop0: p1 < > p2 < p5 > p4 [ 49.541524][ T4659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.546463][ T4658] loop0: p4 size 16776960 extends beyond EOD, truncated [ 49.559482][ T4659] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.281: Directory hole found for htree leaf block 0 [ 49.564671][ T4658] loop0: p5 size 16776960 extends beyond EOD, truncated [ 49.585202][ T4015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.621506][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.621539][ T3336] udevd[3336]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.622656][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 49.656080][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 49.677685][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.679617][ T4663] udevd[4663]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 49.690847][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.703539][ T3336] udevd[3336]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 49.733837][ T4672] netlink: 'syz.0.284': attribute type 21 has an invalid length. [ 49.746019][ T4672] mmap: syz.0.284 (4672) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.772810][ T4678] loop2: detected capacity change from 0 to 512 [ 49.784087][ T4678] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.809614][ T4678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.829039][ T4677] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.287: Directory hole found for htree leaf block 0 [ 49.846403][ T4677] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.886841][ T4015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.914441][ T4698] loop0: detected capacity change from 0 to 1024 [ 49.944113][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.960122][ T4698] EXT4-fs: Ignoring removed oldalloc option [ 49.989222][ T4698] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.012071][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.058629][ T4698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.083303][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.104320][ T4715] __nla_validate_parse: 4 callbacks suppressed [ 50.104335][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 50.131487][ T4715] bond_slave_0: entered promiscuous mode [ 50.137217][ T4715] bond_slave_1: entered promiscuous mode [ 50.144899][ T4715] macvtap1: entered promiscuous mode [ 50.150328][ T4715] bond0: entered promiscuous mode [ 50.156080][ T4715] macvtap1: entered allmulticast mode [ 50.161725][ T4715] bond0: entered allmulticast mode [ 50.166890][ T4715] bond_slave_0: entered allmulticast mode [ 50.172739][ T4715] bond_slave_1: entered allmulticast mode [ 50.181674][ T4715] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 50.182467][ T4711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.227083][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 50.232037][ T4711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.252015][ T4731] bond0: left allmulticast mode [ 50.256906][ T4731] bond_slave_0: left allmulticast mode [ 50.262478][ T4731] bond_slave_1: left allmulticast mode [ 50.268329][ T4731] bond0: left promiscuous mode [ 50.273542][ T4731] bond_slave_0: left promiscuous mode [ 50.278975][ T4731] bond_slave_1: left promiscuous mode [ 50.291183][ T4731] macvtap1: left promiscuous mode [ 50.296404][ T4731] macvtap1: left allmulticast mode [ 50.300049][ T4131] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 50.331227][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.343760][ T4131] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 50.387317][ T4131] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 50.400225][ T4131] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 50.412442][ T4712] lo speed is unknown, defaulting to 1000 [ 50.425429][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 50.438904][ T3252] ================================================================== [ 50.440691][ T4131] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 50.447226][ T3252] BUG: KCSAN: data-race in set_nlink / set_nlink [ 50.447267][ T3252] [ 50.447271][ T3252] write to 0xffff88810629eeb8 of 4 bytes by task 3631 on cpu 1: [ 50.447284][ T3252] set_nlink+0x98/0xb0 [ 50.470320][ T4131] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 50.475072][ T3252] kernfs_iop_permission+0x1d5/0x220 [ 50.477508][ T4131] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 50.485072][ T3252] inode_permission+0x18c/0x300 [ 50.485097][ T3252] link_path_walk+0x14b/0x820 [ 50.490457][ T4131] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 50.500553][ T3252] path_openat+0x1aa/0x1f10 [ 50.500580][ T3252] do_filp_open+0xf7/0x200 [ 50.500603][ T3252] do_sys_openat2+0xab/0x120 [ 50.506013][ T4131] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 50.526912][ T3252] __x64_sys_openat+0xf3/0x120 [ 50.526939][ T3252] x64_sys_call+0x1025/0x2d60 [ 50.526960][ T3252] do_syscall_64+0xc9/0x1c0 [ 50.526983][ T3252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.527006][ T3252] [ 50.527012][ T3252] read to 0xffff88810629eeb8 of 4 bytes by task 3252 on cpu 0: [ 50.527026][ T3252] set_nlink+0x2b/0xb0 [ 50.527051][ T3252] kernfs_iop_permission+0x1d5/0x220 [ 50.620473][ T3252] inode_permission+0x18c/0x300 [ 50.625330][ T3252] link_path_walk+0x14b/0x820 [ 50.630006][ T3252] path_lookupat+0x72/0x2b0 [ 50.634518][ T3252] filename_lookup+0x127/0x300 [ 50.641054][ T3252] vfs_statx+0xa1/0x2f0 [ 50.646169][ T3252] vfs_fstatat+0xec/0x110 [ 50.650500][ T3252] __se_sys_newfstatat+0x58/0x260 [ 50.655515][ T3252] __x64_sys_newfstatat+0x55/0x70 [ 50.660533][ T3252] x64_sys_call+0x141f/0x2d60 [ 50.665211][ T3252] do_syscall_64+0xc9/0x1c0 [ 50.669802][ T3252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.675804][ T3252] [ 50.678118][ T3252] value changed: 0x00000005 -> 0x00000006 [ 50.684095][ T3252] [ 50.686901][ T3252] Reported by Kernel Concurrency Sanitizer on: [ 50.693569][ T3252] CPU: 0 UID: 0 PID: 3252 Comm: udevd Not tainted 6.11.0-rc1-syzkaller-00256-g1c4246294c98 #0 [ 50.703905][ T3252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.713949][ T3252] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 50.726353][ T4131] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 50.749547][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 50.749559][ T29] audit: type=1400 audit(1722649996.081:648): avc: denied { write } for pid=3248 comm="syz-executor" path="pipe:[1656]" dev="pipefs" ino=1656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 50.815086][ T28] bridge_slave_1: left allmulticast mode [ 50.820876][ T28] bridge_slave_1: left promiscuous mode [ 50.828731][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.844683][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.969490][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.980192][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.991109][ T28] bond0 (unregistering): Released all slaves [ 50.998640][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 51.099728][ T28] hsr_slave_0: left promiscuous mode [ 51.105643][ T28] hsr_slave_1: left promiscuous mode [ 51.111853][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.119293][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.127531][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.135048][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.144532][ T28] veth1_macvtap: left promiscuous mode [ 51.150655][ T28] veth0_macvtap: left promiscuous mode [ 51.156177][ T28] veth1_vlan: left promiscuous mode [ 51.161540][ T28] veth0_vlan: left promiscuous mode [ 51.249344][ T28] team0 (unregistering): Port device team_slave_1 removed [ 51.261979][ T28] team0 (unregistering): Port device team_slave_0 removed [ 51.300435][ T981] lo speed is unknown, defaulting to 1000 [ 51.840017][ T4131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.891762][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.960039][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.999577][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.050335][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.122166][ T28] bridge_slave_1: left allmulticast mode [ 52.127992][ T28] bridge_slave_1: left promiscuous mode [ 52.133767][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.141572][ T28] bridge_slave_0: left allmulticast mode [ 52.147242][ T28] bridge_slave_0: left promiscuous mode [ 52.152955][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.240048][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.250352][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.260821][ T28] bond0 (unregistering): Released all slaves [ 52.399594][ T28] hsr_slave_0: left promiscuous mode [ 52.405343][ T28] hsr_slave_1: left promiscuous mode [ 52.411631][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.419180][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.426769][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.436150][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.447765][ T28] veth1_macvtap: left promiscuous mode [ 52.453274][ T28] veth0_macvtap: left promiscuous mode [ 52.458983][ T28] veth1_vlan: left promiscuous mode [ 52.464244][ T28] veth0_vlan: left promiscuous mode [ 52.533549][ T28] team0 (unregistering): Port device team_slave_1 removed [ 52.544489][ T28] team0 (unregistering): Port device team_slave_0 removed [ 52.912570][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.950482][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.000005][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.041481][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.123946][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.154153][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.211541][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.250790][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.330387][ T28] bridge_slave_1: left allmulticast mode [ 53.336071][ T28] bridge_slave_1: left promiscuous mode [ 53.341825][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.350364][ T28] bridge_slave_0: left allmulticast mode [ 53.356031][ T28] bridge_slave_0: left promiscuous mode [ 53.362754][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.372262][ T28] bridge_slave_1: left allmulticast mode [ 53.377960][ T28] bridge_slave_1: left promiscuous mode [ 53.383662][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.392548][ T28] bridge_slave_0: left allmulticast mode [ 53.398290][ T28] bridge_slave_0: left promiscuous mode [ 53.404015][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.569412][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.579918][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.589914][ T28] bond0 (unregistering): Released all slaves [ 53.601668][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.612813][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.622419][ T28] bond0 (unregistering): Released all slaves [ 53.631050][ T28] bond1 (unregistering): Released all slaves [ 53.790715][ T28] hsr_slave_0: left promiscuous mode [ 53.796418][ T28] hsr_slave_1: left promiscuous mode [ 53.802763][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.810561][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.819454][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.827740][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.836953][ T28] hsr_slave_0: left promiscuous mode [ 53.843464][ T28] hsr_slave_1: left promiscuous mode [ 53.849178][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.856554][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.864162][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.871617][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.881723][ T28] veth1_macvtap: left promiscuous mode [ 53.887236][ T28] veth0_macvtap: left promiscuous mode [ 53.892986][ T28] veth1_vlan: left promiscuous mode [ 53.898437][ T28] veth0_vlan: left promiscuous mode [ 53.904475][ T28] veth1_macvtap: left promiscuous mode [ 53.910056][ T28] veth0_macvtap: left promiscuous mode [ 53.915545][ T28] veth1_vlan: left promiscuous mode [ 54.016586][ T28] team0 (unregistering): Port device team_slave_1 removed [ 54.029532][ T28] team0 (unregistering): Port device team_slave_0 removed [ 54.084460][ T28] team0 (unregistering): Port device team_slave_1 removed [ 54.094607][ T28] team0 (unregistering): Port device team_slave_0 removed [ 59.036798][ T29] audit: type=1400 audit(1722650004.391:649): avc: denied { unlink } for pid=2942 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1