last executing test programs: 2.572424441s ago: executing program 1 (id=383): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$eJzs3U1vG0UfAPD/Om99e56mUlUBBxSpB4pKnSbhpUgcyhFBRSW4FyvZRlWcuoqdqgmVaA/00guqQAhRCfEBuHOs+AJ8ikpQqUJVBAcuQeusWze2Ezd144B/P2mTmd1xZsa7M/6v184GMLAmsh+FiJcj4qsk4nDTtuHIN05slFt7dH02W5JYX//kjySSfF2jfJL/PphnXoqIX76MOFlorbe6srpQKpfTpTw/WVu8MlldWT11abE0n86nl6dnZs68NTP97jtv96yvr5//67uP731w5vbxtW9/enDkThJn41C+rbkfz+FGc2YiJvLnZCTObio41YPK9pKk3w1gR4bycT4S2RxwOIbyUQ/8930REevAgEqMfxhQjTigcW7fo/Pgf42H72+cALX2f3jjvZHYVz83OrCWPHVmlJ3vjveg/qyOn3+/eydbonfvQwBs68bNiDg9PNw6/yX5/Ldzp7sos7kO8x/snntZ/PNGu/in8Dj+iTbxz8E2Y3cnth//hQdtHpb06l3qLP57r238+/ii1fhQnvtfPeYbSS5eKqfZ3Pb/iDgRI2NZfqvrOWfW7q932tYc/2VLVn8jFszb8WB47OnHzJVqpefpc7OHNyNeaY1/h57M//vqse7m/Z89H+e7rONYevfVTtu27/+Ltf5jxGtt9/+TK1rJ1tcnJ+vHw2TjqGj1561jv3aqv9/9z/b/ga37P540X6+tPnsdP+z7O+20bafH/2jyaT09mq+7VqrVlqYiRpOPWtdPP3lsI98on/X/xPGt5792x//+iPisy/7fOnqrY9G9sP/nnmn/P3vi/oeff9+p/u72/5v11Il8TTfzX7cNfJ7nDgAAAAAAAPaaQkQciqRQfJwuFIrFjc93HI0DhXKlWjt5sbJ8eS7q35Udj5FC40r34abPQ0zln4dt5Kc35Wci4khEfD20v54vzlbKc/3uPAAAAAAAAAAAAAAAAAAAAOwRYx2+/5/5bejpsvl/BB/d/VYCL4xbfsPg2nb89+JOT8Ce5PUfBtcOxv83L6IdwO7z+g8DaqTfDQD6yes/DC7jHwaX8Q+Dy/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp/7ly2rK89uj6b5eeuriwvVK6emkurC8XF5dnibGXpSnG+Upkvp8XZyuJ2f69cqVyZmo7la5O1tFqbrK6sXlisLF+uXbi0WJpPL6TuNgQAAAAAAAAAAAAAAAAAAACtqiurC6VyOV2SkNhRYrjLwmPR96YOTOJ2D0Z3nycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjyTwAAAP//4fE1qw==") unshare(0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xc1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8000}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045519, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.34234714s ago: executing program 1 (id=387): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x28000c2, &(0x7f0000000680)=ANY=[@ANYBLOB='uni_xlate=0,check=strict,nnonumtail=1,discard,nonumtail=0,rodir,utf8=1,utf8=1,shortname=winnt,shortname=winnt,nfs,nnonumt]il=1,nnonumtail=1,uni_xlate=1,utf8=1,check=strict,iocharset=ascii,uni_xlate=1,\x00'], 0x97, 0x2a9, &(0x7f0000002300)="$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") pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',rans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c756e026d652c7472616e733d6664"]) 2.274275995s ago: executing program 1 (id=388): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) clock_gettime(0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bca84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b818184ebad0485fbaa816e3b26199d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efc794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a74c4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee19210490639d0f4893d7d2c79c2d5cec4ebf2e04aeb1e36e370645e52e1328e70f011a950f8ae1dfa42b14ea99ffe35186534534630ad8a4881ff625e1b389cedc085acdba51308f2c4ab4b781e3756adbe6d012874666b157d1f077614a1e7c90180694efeb4094dc87f969af3e0a4ecdae32a091fd3ca0b86d732d130b983602ff21887eb1692e622d880a8378b129731c379bdcc7db13d2ab8b189ff83ca71d967fd7e1c46def217e7a9d0ac26bb6f65bbe904e3"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.230694679s ago: executing program 3 (id=389): r0 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000ff0f0000180100002020732500000000000000017b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 2.136359937s ago: executing program 3 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000380)) (fail_nth: 4) r6 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000400000006000700", @ANYRES32=r8], 0x3c}}, 0x0) 1.886895177s ago: executing program 1 (id=391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0200000000ff000044850000002a000000a50000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) lseek(r1, 0x7ffffb, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfd14) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000140), 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e24, 0x80000, @dev}, 0x1c, 0x0}, 0x0) 1.798416024s ago: executing program 2 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000241000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000b400000000008000140000000130500020094000000080006400000000208000440000000070900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1.705569542s ago: executing program 2 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)=ANY=[@ANYBLOB="2cca4000", @ANYRES16=r1, @ANYBLOB="0100000000000000000022000000180001801400020076657468315f766972745f7769666900"], 0x2c}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000043030000000000000000850000005300"], 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x200000, 0x5}, 0x10, 0x0, r3}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r3, 0x6}, 0xfffffffffffffcb8) open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000001c0)={@id={0x2, 0x0, @b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRES8=r2, @ANYRES64=r4, @ANYRES8=r3, @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x1d9580, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) brk(0x55d55ede6004) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup(r6) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) unshare(0x26020480) unshare(0x8040480) capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000080)=""/94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 1.643370647s ago: executing program 2 (id=395): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x200010, &(0x7f0000000380)=ANY=[@ANYRES32], 0x5, 0x7f0, &(0x7f0000001900)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(&(0x7f0000000040)='./file1\x00', 0x46100, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20efff00000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 1.336207732s ago: executing program 1 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x40}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x12}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1ff}]}, 0x58}}, 0x240640c0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x40) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2000000}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb9c6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8ad}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff0001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd2b}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004085}, 0x801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x81, 0x7, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x17, 0x7c, [@local, @rand_addr=0x64010102, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0xb, 0xc6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000780)={&(0x7f00000005c0), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40019}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000007c0)={r3, 0xb, 0xfffffffffffff772, 0xffff}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000800)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000840)='GPL\x00', 0x7, 0xed, &(0x7f0000000880)=""/237, 0x41100, 0x1, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[0x1, 0x1, r7, r8, r9], &(0x7f0000000b80)=[{0x1, 0x1, 0x7, 0xc}, {0x4, 0x1, 0xb, 0x9}, {0x3, 0x5, 0x8, 0x24ba814c2cf4709a}], 0x10, 0x3e}, 0x90) r10 = socket$netlink(0x10, 0x3, 0xb) write$P9_RCLUNK(r8, &(0x7f0000000c80)={0x7, 0x79, 0x2}, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000055) r12 = creat(&(0x7f0000000e00)='./file0\x00', 0x1) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r8) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r10, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x88, r13, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3b4f, 0x1a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040002}, 0x1) link(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='./file0\x00') setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000001080)=0x8b, 0x4) mount_setattr(r12, &(0x7f00000010c0)='./file0\x00', 0x9000, &(0x7f0000001100)={0x100003, 0x100000, 0x100000, {r8}}, 0x20) setsockopt$inet_udp_int(r6, 0x11, 0xa, &(0x7f0000001140)=0x1, 0x4) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), r8) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0x100, r14, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x34dd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL80211_CMD_DEL_INTERFACE(r12, &(0x7f0000001440)={&(0x7f0000001380), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0x400c051) 1.169674065s ago: executing program 4 (id=400): sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000000)=0x2) syz_emit_ethernet(0xad, &(0x7f0000000040)={@multicast, @remote, @void, {@x25={0x805, {0x1, 0xe7, 0xf7, "23cae78685e1b4610c3bf2698569f0783d60b7cf414863aeee765f785f13ddffd7fc97f5142bf2f98bec0f47b47902567a2b0a58a30a2fd8b811630fb27014b792d072114157d3ca8414eedcfec605f081640d9e351d20a8fc00ceb69a2232cd9e9e23dbb04009508b33e8ae63258363f0be17666a4f7405710a6cb2182c051f69f692ec418df19f6126391e494feace5e141152cb69a973b208885b"}}}}, &(0x7f0000000100)={0x1, 0x1, [0x78e, 0x9e7, 0x778, 0x3b8]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xa948}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x400000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)={0x1, {{0xa, 0x4e24, 0x6e, @local, 0x401}}, 0x0, 0x7, [{{0xa, 0x4e24, 0xfffffff8, @loopback, 0x1}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}, 0x10000}}, {{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e23, 0x4, @private2, 0x2}}, {{0xa, 0x4e22, 0x1, @loopback, 0x6}}, {{0xa, 0x4e22, 0x8, @mcast1, 0x9d7}}, {{0xa, 0x4e24, 0x0, @empty, 0xaf2a}}]}, 0x410) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000700)=""/179, 0xb3) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfd}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000005}, 0x20008000) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x0, [0x2, 0x4, 0x6]}, &(0x7f0000000980)=0x44) set_mempolicy(0x8000, &(0x7f00000009c0), 0x8) ioctl$KDMKTONE(r1, 0x4b30, 0x87) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000a00)) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000a40)=0x8) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000a80), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000ac0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000b40)={r3, 0x2, r0, 0x1, 0x80000}) fstatfs(r2, &(0x7f0000000b80)=""/4096) write$tun(0xffffffffffffffff, &(0x7f0000001b80)={@void, @val={0x2, 0x1, 0xfff, 0xb9, 0x8, 0x1b}, @x25={0x1, 0x9, 0xb, "7e764c5b1fb7ad75278eb4fa394b4bfea089754eafbc3ce8636fa71ed73f6d2db44b493f859113585b9f315c6e"}}, 0x3a) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001ec0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c00)={0x278, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffd3a}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8be4d91849fae7b4e54c28b2d45c873af6024136"}}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x843b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff2001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4084}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001f00)={0x0, 'rose0\x00', {0x2}, 0xfff}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) copy_file_range(r4, &(0x7f0000001f40)=0x80000000, r2, 0x0, 0x9, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000002100)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x70, r5, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x40088c0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000002140)) write$tun(r1, &(0x7f0000002180)={@void, @void, @arp=@generic={0x206, 0x19, 0x6, 0xd, 0x3, @local, "9513dc917cfd89236a4d27138e", @random="fcf3b637a3c5", "8f58802f86bb531064be73ea349ed53d"}}, 0x31) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000024c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002200)={0x280, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xe2b5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x4c7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xe5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa431}, {0x6, 0x11, 0x401}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xaefd}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x45c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa39}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xa}, {0x5, 0x14, 0x1}}]}, 0x280}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000002980)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0x9c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x9c}}, 0x4000000) 1.1123189s ago: executing program 3 (id=401): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = getpgrp(0xffffffffffffffff) write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r6, 0x2) listen(r5, 0x80) (async) listen(r5, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x200000, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigsuspend(0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "8d747ea4dc9278634a4e3ae552"}]}, 0x28}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "8d747ea4dc9278634a4e3ae552"}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x28, 0x6d, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x40441, 0x420}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) write$binfmt_script(r1, &(0x7f0000000100), 0x3af4701e) (async) write$binfmt_script(r1, &(0x7f0000000100), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) 1.11196322s ago: executing program 0 (id=402): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1a0, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x160, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32a56f94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f000000}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0x4, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.10678224s ago: executing program 4 (id=403): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x5, [@var={0xa, 0x0, 0x0, 0xe, 0x2, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x1}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7}, {0x4, 0x4}, {0xe, 0x5}, {0xa, 0x4}, {0xb}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}, @const={0x1, 0x0, 0x0, 0xa, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xb}}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000a00)=""/177, 0xa5, 0xb1, 0x1, 0x4}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$eJzs3U1v28gdx/EfZfmxQFC0xSIIsvFs0gUcNFUkeeOFkR7KUpTNrSQKJF3Yp0W6sRdB5GybpEDjy9aXPgDtG+htL3voiyjQc899Az0WWLS3Ar2oIClKskRZip+Sdr8fI9GI/JPzJ4fRhBY5FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2tk1kzm1wG+eMj9d27zupoW7U+uVrPiPlpZ0PZ10/TuD2e/Ef93WzfTdTS3FL0s6+sY733z47WIhW/6UhM5Cr7vCF6+Onj7qdPafn622rnWW5S7FWCYqzLDUltvyQt9r2luu8ULfbG5slO9v10NT9xpuuBdGbtM4gVuI/MCsOXdNZXNz3bilPX+ntVWzG2428cPvV8vlDfPRYq/5739UCp1tr9HwWltJTDw7jlnsHyGu3TTm4Elnf31aknFQZZag6rSgarlarVSq1crGg80HH5bLxbEJ5REaixgctG9P4+MqXdAnN3B+hbj//7slNbSklna0K5P746imQL6aE+b3ZP3/+/fdU+sd7v+zXv76YPYNJf3/rfTdrUn9/4RcjEyyQN4ca8L0s/280Csd6akeqaOO9vX8Yta7enEZXu7PllSUPIXy5akpW1tyZXpTjDa1oQ2V9bG2VVcoo7o8NeQq1J5CRXLVTNokkCtbkXwFMlqTo7syqmhTm1qXkauS9uRrRy1tqSZb/+52uwd6kuz39VNyVBZUmSWo2D8Gx4Mm9f8//Txd4vX6f/z/6R87M8QAb1y3d/4/2VzexNXLywgAAAAAAFw0K/ntu5V8d/+upK7qXsMtv+m0AAAAAADABUq++b8Zv8zHpXdlTTj/7159bgAAAAAA4GJYyT12lqSV5KJ+a3An1CwXAeTeHAAAAAAAAN4uyff/txakbjK02qqs1zr/BwAAAAAA/wN+OzTGfjEbY7ebfa1fkBS2F60//3NRwbx13N79rnVox3Psw17M2BUAUf2GVVQ6UG8yXu+CpOSd4960euMD9wbBtNKBfaWvDqaN9W8FIwkszGW/vshJ4NrRUAIbxd47/V7vpTHv9ep9fFRQMietZaXuNdyS4zceVmTb1wqRuxv94tmTX0pBfzsPnnT2S5981nmc5HIcTzo+jPP4/EQ6hWm5vEzGW0juucjb4mXVsyp/12quWEm95Wz752QfFoYrmm37f63bacztlfR15ShrAVm/6hUqpaTJBlufjA5hDbKojG55XkNMyGIpyeJOGnNn7U76kuWXtsLS9+akamm8DYLhLKrDWUzfF9a/xvbFlCziY2E9zuIv8YomZLH+elmMtQgAvCkHg14oGcR8fIz90X73LJ9y03v3H56s5eUfu+kNh3NSsffdRHoT4qR+RfEn+loatpCO4l68kfOJXu71K0ua8IlePkfvFtf1p8EzkHpp9+YU+1n8p9vtPqwk9f5hpFf9Il7gi4n1ho3qXLwL7788/FkyAH7s0/1P959Vq+sb5Q/K5QdVzSeb0Xuh7wEA5Jj+jJ2TEUuD/qzfd3/QP6t+/I/309KJfvdb/UsKSvpEn6mjx7qXPUJgNb/elaHLEO6Nn7XGscvSaGxF9yae1SV96VBstR87r2yRk/9fGMSuX3YzAABwpW5P6YdH+/+8c/d72Xn32o3c8+6TffnoE4InxVaueE8AAPD14QZfWSvRb6wg8NofVzY3K3a07ZrAd35sAq+25RqvFbmBs223tlzTDvzId/yGaQda9GpuaMKddtsPIlP3A9P2Q283efK76T36PXSbdivynLDdcO3QNY7fimwnMjUvdEx750cNL9x2g2ThsO06Xt1z7MjzWyb0l+W4JWNC1x0K9GpuK/LqXlxsmXbgNe1gz/zEb+w0XVNzQyfw2pGfrjCry2vV/aCZrLak7mkPOgQA4Gvjxaujp486nf3npxSOlRay69FOCV7IW+Eb3kQAADCCXhoAAAAAAAAAAAAAAAAAAAAAgLffLPf/nVrIbgrMpswrJ1jqT/n5tZnWbGkw5cu/nSvDMxQKo1N6I+12py/+17RQzItZjgsLkjrZ7h+OOb7QrVidKVhpoXjx+3BZyjsSLq3wg4OTx+FYTDwzd9Zivy2K5//nkFd49uWEWdOPqMWT+3DhtA08WShKer5wjia4+s8iAFfrvwEAAP//pJI9bA==") r2 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x4, 0x0, @buffer={0x0, 0x70, &(0x7f00000002c0)=""/112}, &(0x7f0000000240)="a18d7acda0b2", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000c00)='rxrpc_call_complete\x00', r1}, 0xfffffe88) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000c00)='rxrpc_call_complete\x00', r1}, 0xfffffe88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a847e0ffff00124000638477fbac141716e000030a07070403fe80000000000002845013f2325f1a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000530b097600000c0111"], 0x15c}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000530b097600000c0111"], 0x15c}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x1000000000000, 0x1}}, 0x3c) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x1000000000000, 0x1}}, 0x3c) 1.093236601s ago: executing program 0 (id=404): r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r0, 0xaf2c5000) r1 = socket$packet(0x11, 0x3, 0x300) ftruncate(r0, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x1000, 0x8, 0x8, 0x10}, {0x80, 0x0, 0x3, 0x21b}, {0x5, 0xe8, 0x6, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r5, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/54, 0x36}], 0x2, &(0x7f0000001200)=""/120, 0x78}, 0x6}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001280)=""/203, 0xcb}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/38, 0x26}, {&(0x7f00000023c0)=""/85, 0x55}, {&(0x7f0000002440)=""/148, 0x94}, {&(0x7f0000002500)=""/254, 0xfe}, {&(0x7f0000002600)=""/104, 0x68}], 0x7, &(0x7f0000002700)=""/144, 0x90}, 0x1}, {{&(0x7f00000027c0)=@isdn, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002840)=""/197, 0xc5}, {&(0x7f0000002940)=""/12, 0xc}, {&(0x7f0000002980)=""/228, 0xe4}, {&(0x7f0000002a80)=""/15, 0xf}, {&(0x7f0000002ac0)=""/111, 0x6f}, {&(0x7f0000002b40)=""/162, 0xa2}], 0x6}, 0x60}, {{&(0x7f0000002c80)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002d00)=""/121, 0x79}], 0x1}, 0xffff371d}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)=""/105, 0x69}, {&(0x7f0000002e40)=""/90, 0x5a}], 0x2, &(0x7f0000002f00)=""/251, 0xfb}, 0x8}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000003000)=""/1, 0x1}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/133, 0x85}, {&(0x7f0000004100)=""/137, 0x89}], 0x4, &(0x7f0000004200)=""/239, 0xef}, 0x3}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004300)=""/90, 0x5a}, {&(0x7f0000004380)=""/52, 0x34}, {&(0x7f00000043c0)=""/245, 0xf5}, {&(0x7f00000044c0)=""/248, 0xf8}, {&(0x7f00000045c0)=""/193, 0xc1}, {&(0x7f00000046c0)=""/189, 0xbd}, {&(0x7f0000004780)=""/6, 0x6}], 0x7, &(0x7f0000004840)=""/13, 0xd}, 0xbe8}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004880)=""/211, 0xd3}, {&(0x7f0000004980)=""/51, 0x33}, {&(0x7f00000049c0)=""/108, 0x6c}, {&(0x7f0000004a40)=""/184, 0xb8}], 0x4, &(0x7f0000004b40)=""/227, 0xe3}, 0x401}], 0x8, 0x60, &(0x7f0000004e40)={0x77359400}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000004e80)={r3, 0x0, r0, 0x3, 0x80000}) ioctl$FIOCLEX(r5, 0x5451) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004ec0), 0x80040, 0x0) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000004f00)) prlimit64(r4, 0x0, &(0x7f0000004f40)={0xc4, 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000005040)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4005) r7 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005080), 0x401000, 0x0) ioctl$PPPIOCGIDLE(r8, 0x8010743f, &(0x7f00000050c0)) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000005100)=""/142) recvfrom(r0, &(0x7f00000051c0)=""/130, 0x82, 0x20, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000005300)={'syztnl0\x00', &(0x7f0000005280)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x0, 0xfad, 0x0, @loopback, @loopback, 0x700, 0x8000, 0x100, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005380)={'vcan0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000005580)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005540)={&(0x7f00000053c0)={0x178, 0x13, 0x20, 0x70bd25, 0x25dfdbff, {0x25, 0x8, 0x0, 0x6, {0x4e23, 0x4e21, [0x40, 0x4, 0x7fff, 0x1], [0x7, 0xcf8, 0x8, 0x8], r9, [0x8001, 0x31]}, 0x6, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "d2e125b6745fc77ec093bbbc8cf98b9a11a74e4844df1793f7bfb11aa40a9d7f4254d263c65322f2ec"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "801eeb60d9a830ae00084b398ca350f8f02cae7ea13562613953c3ec7e462384164cc0fbc541799fe21b19f58ecebf18536218c580d10a0ebc305b54"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "d5a6916e24ccca123562b778e3df368d7200d6dbb557b767237667825a12e605c0f1da5669ea9ba2f25db94704e8a03013a3376927a7ef5da3bc19324a3ed77cb9d7671c9ba51b31f8bff1bd030b9645774ec94a07ba3d923909cb6edf8a59594e9c4675b1ec5b4f4fcecc"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "4c10c23402f603a2784dd80f3251591ea72abbc37f67a7e4ffd0f21a539c43d092a3c161d26ef61bbe556a6a427603956492e556db38de7288ad1a5a0ac982372bb84f9dc856ee"}]}, 0x178}, 0x1, 0x0, 0x0, 0x4040005}, 0x44080) r10 = accept$packet(r6, &(0x7f00000055c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005600)=0x14) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000005640)={r9, 0x1, 0x6, @broadcast}, 0x10) pipe(&(0x7f0000005680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r11, 0xf50f, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r12, 0x80047213, &(0x7f00000056c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000005740)={r10}) 992.491379ms ago: executing program 0 (id=405): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff7}}], 0x18}}], 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x44}}], 0x18}}], 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000970000000000000000000000180100002020702500000000002092ad9c10f8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/vlan0\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="3016b8", 0x3}], 0x1) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000240)) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') 991.71397ms ago: executing program 0 (id=406): r0 = socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0xe223, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000001080)) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x3) r4 = syz_io_uring_setup(0x7ea5, &(0x7f0000000480), &(0x7f00000001c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@multicast1, @dev}, &(0x7f0000000240)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000010140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}, r7}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) io_setup(0xffff, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0xfffa, 0x400, 0x401}, &(0x7f0000000040)=0x14) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 988.42802ms ago: executing program 4 (id=407): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000001700000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500e0000002000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003300000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000fe880000000000000000000000000001000000002b00000000000000e000000100"/436], 0x1fc}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r2, 0x923, 0x1000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}]}, 0x3c}}, 0x0) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @auto=[0x33, 0x62, 0x38, 0x31, 0x61, 0x34, 0x33, 0x64, 0x38, 0x35, 0x35, 0x35, 0x31, 0x39, 0x66, 0x2580ec5ca75d8643]}, &(0x7f0000000180)={0x0, "dacb05b6029427867763051a42d7e35b27b8ea1de4c6ecb6f7e62922f58e541cfaa3c313b9a86a14b9b1b6b3d6e97a1ce4fb3ae6fd7085265b68c895a177e19d", 0x27}, 0x48, r5) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000080)={0x7, 0xfffffffd, 0x5, 0x10001, 0x48c30f1f, 0x1}) 950.230603ms ago: executing program 4 (id=408): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010001fffffff00000000000003"], 0x114}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close(r4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in=@multicast2}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast1, @in=@broadcast, @in6=@dev, @in=@remote, 0x0, 0x4}]}]}, 0xec}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000001100)="c6", 0x1, 0x2404c805, 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x800) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x2, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x46}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000) ioctl$VT_ACTIVATE(r7, 0x5606, 0xd2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r8 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r8}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0x0) 800.467305ms ago: executing program 0 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000882", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000080002000000000014000600fe8800000000f1ff000000000000000108000800ac1414bb5d4c0b0413a5cad3700e1a2391572bc1aa40b7c8ff0700000ea5908ba2ed8a33914a6e8a1c457c4b2266d265920a0408f7dbc356e02b5f1c7b870d032c217d8eac30399b4332242de9b92af43b7100"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)) r8 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$USBDEVFS_GET_SPEED(r7, 0x551f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 793.227886ms ago: executing program 2 (id=410): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") unshare(0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xc1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8000}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045519, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 674.373756ms ago: executing program 2 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000380)) (fail_nth: 5) r6 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000400000006000700", @ANYRES32=r8], 0x3c}}, 0x0) 300.115616ms ago: executing program 3 (id=412): creat(&(0x7f0000000380)='./file0\x00', 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_submit(0x0, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) syz_emit_ethernet(0x9a, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c0001"], 0x68}}, 0x0) (async) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00'}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x2}]}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x9}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x5a}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1e03e978}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) (async) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) socket$inet6(0xa, 0x80002, 0x0) 204.686074ms ago: executing program 0 (id=413): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x0, 0x8000, 0x2202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000540)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@nombcache}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x53d, &(0x7f0000001100)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000005c0)={0x1, {{0x2, 0x810, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x5, {{0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x3e}}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000003000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00"/395], 0x210) syz_open_procfs(0x0, &(0x7f0000000c80)='net/ptype\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x3, &(0x7f0000000240)=[{0x5, 0x2, 0x0, 0x401}, {0x7fff, 0x9, 0x80, 0x6}, {0x4, 0x2f, 0x40, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) pipe2(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr$security_capability(r4, &(0x7f0000001080), &(0x7f00000010c0)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000500)={r3, 0x0, 0x1}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = memfd_create(&(0x7f0000000000)='\x107', 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000440)=0x5) finit_module(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r6, 0x3, r2, 0x5}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000040)) 100.438522ms ago: executing program 3 (id=414): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1a0, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x160, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32a56f94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x956fa532}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0x4, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 99.343753ms ago: executing program 4 (id=415): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000380)=0x8, 0xff) socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x7}) (async) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x0, [0x0, 0xffff, 0x5]}, &(0x7f0000000540)=0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00'}, 0x24) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) (async) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="184600000600"/16], &(0x7f0000000480)='GPL\x00', 0x1cd, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x5, 0x10, 0xc}, {0x20, 0x2, 0xd, 0x9}, {0x0, 0x100005}, {0x5, 0x3, 0x5, 0x1}, {0x5, 0x2, 0x1, 0x4}, {0x0, 0x2, 0x0, 0x5}, {0x4, 0x0, 0x1}], 0x10, 0x3}, 0x90) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg2\x00'}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r6, @ANYRESDEC=r5, @ANYRESDEC=r7], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES32], 0x3, 0x352, &(0x7f0000000480)="$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") (async) io_setup(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=r10, @ANYBLOB="c0230000000000001c001280110001006272696467655f736c61766500000000040005800a000200bbbbbbbbbbbb000008001f000000000008000a"], 0x68}}, 0x0) 91.552453ms ago: executing program 2 (id=416): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) (async) ftruncate(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) (async) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe3589, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000005280)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000003) 84.081714ms ago: executing program 3 (id=417): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10400, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x1, 0x1ff, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) recvfrom$inet6(r5, &(0x7f0000000680)=""/123, 0x7b, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) 438.99µs ago: executing program 4 (id=418): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) splice(r5, 0x0, r6, 0x0, 0x9, 0x0) write(r3, &(0x7f0000001100)="94", 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r2, r6, 0x81, 0x0) write$binfmt_elf64(r6, 0x0, 0xffac) write$binfmt_misc(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="81000000", @ANYRES16=r7, @ANYBLOB="000228bd7000fedbdf250600000005002100000000000c001000050000000000000008001900ac1414aa06001d0006000000"], 0x38}, 0x1, 0x0, 0x0, 0x2000c8c4}, 0x800) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = dup2(r9, r9) socket(0x28, 0x5, 0x0) r11 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) syz_io_uring_setup(0x2b06, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r10, 0x2def, 0xc23, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 0s ago: executing program 1 (id=419): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0xd, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1002804, &(0x7f0000000380)={[], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_eq}]}, 0x21, 0x4a6, &(0x7f00000014c0)="$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") r2 = creat(0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, 0x1) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x0, 0x1, 0x1}, &(0x7f0000000240)=[{}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000851008000100000018240000", @ANYRES32, @ANYBLOB="0000000004000000456b3000100000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9}, 0x90) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xe) pipe(&(0x7f0000000600)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000005c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000700)=@secondary) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000002c0)=0x5) open(&(0x7f0000000300)='./file0\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 26.201175][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.212925][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.223441][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.233369][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.243819][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.254707][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.262265][ T3257] veth1_macvtap: entered promiscuous mode [ 26.272945][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.283408][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.293232][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.303672][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.313616][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.324059][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.335242][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.343496][ T3258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.352225][ T3258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.361023][ T3258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.369741][ T3258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.404017][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.414659][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.424661][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.435423][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.445333][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.455795][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.467755][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.476870][ T3265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.485670][ T3265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.494456][ T3265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.503263][ T3265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.521095][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.531671][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.541564][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.552020][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.561905][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.572415][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.582214][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.592704][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.603903][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.625464][ T3407] loop0: detected capacity change from 0 to 512 [ 26.642541][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.653127][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.662081][ T3407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 26.663020][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.685940][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.685940][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 26.685950][ T29] audit: type=1400 audit(1722895231.459:143): avc: denied { mount } for pid=3406 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.696045][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.702943][ T3407] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.723286][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.723300][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.746288][ T29] audit: type=1400 audit(1722895231.519:144): avc: denied { write } for pid=3406 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.753786][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.766309][ T29] audit: type=1400 audit(1722895231.539:145): avc: denied { add_name } for pid=3406 comm="syz.0.1" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.789778][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.795343][ T29] audit: type=1400 audit(1722895231.539:146): avc: denied { create } for pid=3406 comm="syz.0.1" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.819134][ T3407] EXT4-fs (loop0): shut down requested (0) [ 26.838883][ T29] audit: type=1400 audit(1722895231.589:147): avc: denied { read append open } for pid=3406 comm="syz.0.1" path="/0/file0/memory.numa_stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.874943][ T29] audit: type=1400 audit(1722895231.589:148): avc: denied { ioctl } for pid=3406 comm="syz.0.1" path="/0/file0/memory.numa_stat" dev="loop0" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.903166][ T3257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.912068][ T3257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.920924][ T3257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.921009][ T3257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.941948][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 26.943599][ T3413] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.944597][ T29] audit: type=1400 audit(1722895231.709:149): avc: denied { create } for pid=3411 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.944696][ T29] audit: type=1400 audit(1722895231.709:150): avc: denied { ioctl } for pid=3411 comm="syz.3.4" path="socket:[3009]" dev="sockfs" ino=3009 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.954304][ T29] audit: type=1400 audit(1722895231.719:151): avc: denied { read } for pid=3411 comm="syz.3.4" dev="nsfs" ino=4026532514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.995208][ T3427] loop0: detected capacity change from 0 to 164 [ 27.015294][ T29] audit: type=1400 audit(1722895231.729:152): avc: denied { open } for pid=3411 comm="syz.3.4" path="net:[4026532514]" dev="nsfs" ino=4026532514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.030224][ T3419] capability: warning: `syz.4.7' uses deprecated v2 capabilities in a way that may be insecure [ 27.058314][ T3427] ======================================================= [ 27.058314][ T3427] WARNING: The mand mount option has been deprecated and [ 27.058314][ T3427] and is ignored by this kernel. Remove the mand [ 27.058314][ T3427] option from the mount to silence this warning. [ 27.058314][ T3427] ======================================================= [ 27.126420][ T3427] iso9660: Unknown parameter 'ÿÿÿÿÿ0xffffffffffffffffÿÿ' [ 27.143061][ T3413] hsr0: entered promiscuous mode [ 27.149120][ T3426] loop0: detected capacity change from 0 to 2048 [ 27.160982][ T3413] hsr0: left promiscuous mode [ 27.182488][ T3426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.195664][ T3437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9'. [ 27.206317][ T3426] IPv6: sit1: Disabled Multicast RS [ 27.212143][ T3426] sit1: entered allmulticast mode [ 27.241580][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.271778][ T3413] syz.3.4 (3413) used greatest stack depth: 11312 bytes left [ 27.272853][ T3451] mmap: syz.4.12 (3451) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.308229][ T3454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11'. [ 27.341583][ T3459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 27.368672][ T3454] loop0: detected capacity change from 0 to 764 [ 27.383050][ T3454] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 27.520710][ T3479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 27.582598][ T3478] ALSA: seq fatal error: cannot create timer (-22) [ 27.690797][ T3494] loop3: detected capacity change from 0 to 1024 [ 27.701228][ T3494] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 27.758995][ T3494] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 27.774591][ T3494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 27.781085][ T3494] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.25: Freeing blocks not in datazone - block = 0, count = 4096 [ 27.795628][ T3494] EXT4-fs (loop3): 1 orphan inode deleted [ 27.801662][ T3494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 27.828100][ T3495] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.25: path /4/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 27.847512][ T3495] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz.3.25: path /4/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.869183][ T3495] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 18: comm syz.3.25: path /4/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.895542][ T3513] loop0: detected capacity change from 0 to 512 [ 27.902349][ T3513] EXT4-fs: Ignoring removed nobh option [ 27.910186][ T3495] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz.3.25: path /4/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.950550][ T3513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.964392][ T3513] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.986516][ T3513] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.29: bg 0: block 224: padding at end of block bitmap is not set [ 28.018713][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.033660][ T3527] xt_bpf: check failed: parse error [ 28.059867][ T3513] syz.0.29 (3513) used greatest stack depth: 11136 bytes left [ 28.072176][ T3529] team_slave_0: entered promiscuous mode [ 28.074260][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.077920][ T3529] team_slave_1: entered promiscuous mode [ 28.128388][ T3539] loop3: detected capacity change from 0 to 1024 [ 28.137345][ T3542] netlink: 68 bytes leftover after parsing attributes in process `syz.0.35'. [ 28.139338][ T3539] EXT4-fs: Ignoring removed orlov option [ 28.151881][ T3539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.171123][ T3542] loop0: detected capacity change from 0 to 1024 [ 28.188939][ T3542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.198701][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.212519][ T3542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.229894][ T3544] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.243545][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.256510][ T3544] loop1: detected capacity change from 0 to 128 [ 28.286317][ T3544] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.298821][ T3544] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 28.339660][ T3563] Zero length message leads to an empty skb [ 28.375057][ T3257] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.412737][ T3567] loop1: detected capacity change from 0 to 4096 [ 28.419473][ T3567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.441527][ T3567] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 28.453640][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.463515][ T3567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.478443][ T3567] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.42: corrupted inode contents [ 28.504218][ T3567] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #15: comm syz.1.42: mark_inode_dirty error [ 28.522293][ T3581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.44'. [ 28.525623][ T3567] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.42: corrupted inode contents [ 28.552966][ T3567] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.42: mark_inode_dirty error [ 28.565487][ T3581] loop2: detected capacity change from 0 to 764 [ 28.575000][ T3567] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.42: corrupted inode contents [ 28.586750][ T3581] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 28.596518][ T3567] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.42: mark_inode_dirty error [ 28.608295][ T3567] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.42: corrupted inode contents [ 28.623264][ T3567] EXT4-fs error (device loop1): ext4_truncate:4241: inode #15: comm syz.1.42: mark_inode_dirty error [ 28.635868][ T3567] EXT4-fs error (device loop1) in ext4_setattr:5553: Corrupt filesystem [ 28.644903][ T3582] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.42: corrupted inode contents [ 28.662758][ T3591] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 28.670411][ T3591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 28.688295][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 28.707722][ T3591] loop0: detected capacity change from 0 to 512 [ 28.718796][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.730023][ T3591] EXT4-fs: Ignoring removed oldalloc option [ 28.741902][ T3591] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.47: Parent and EA inode have the same ino 15 [ 28.763860][ T3591] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.780708][ T3591] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.47: Parent and EA inode have the same ino 15 [ 28.788917][ T3597] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 28.793638][ T3591] EXT4-fs (loop0): 1 orphan inode deleted [ 28.812335][ T3591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.848622][ T3599] netlink: 560 bytes leftover after parsing attributes in process `syz.4.51'. [ 28.861314][ T3603] loop4: detected capacity change from 0 to 512 [ 28.869480][ T3603] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 28.869679][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.878067][ T3603] EXT4-fs (loop4): orphan cleanup on readonly fs [ 28.894613][ T3603] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 28.909412][ T3603] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 28.917875][ T3603] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.51: bg 0: block 40: padding at end of block bitmap is not set [ 28.935120][ T3603] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 28.943994][ T3603] EXT4-fs (loop4): 1 truncate cleaned up [ 28.951554][ T3603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.973460][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.003121][ T3612] loop0: detected capacity change from 0 to 2048 [ 29.011761][ T3612] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.55: casefold flag without casefold feature [ 29.031464][ T3612] EXT4-fs (loop0): get root inode failed [ 29.037215][ T3612] EXT4-fs (loop0): mount failed [ 29.040407][ T3620] loop1: detected capacity change from 0 to 512 [ 29.089126][ T3624] loop4: detected capacity change from 0 to 2048 [ 29.117084][ T3624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.178632][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.204383][ T3633] loop4: detected capacity change from 0 to 256 [ 29.267459][ T3638] 9pnet_fd: Insufficient options for proto=fd [ 29.541437][ T3647] dccp_close: ABORT with 96 bytes unread [ 29.587190][ T3659] loop2: detected capacity change from 0 to 256 [ 29.593667][ T3659] msdos: Bad value for 'gid' [ 29.598389][ T3659] msdos: Bad value for 'gid' [ 29.623830][ T3656] loop4: detected capacity change from 0 to 2048 [ 29.627107][ T3661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.70'. [ 29.647581][ T3661] loop3: detected capacity change from 0 to 764 [ 29.654542][ T3661] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 29.664803][ T3656] loop4: p1 < > p4 [ 29.669703][ T3656] loop4: p4 size 8388608 extends beyond EOD, truncated [ 29.722164][ T3664] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 29.729659][ T3664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3664 comm=syz.3.71 [ 29.754188][ T3666] loop4: detected capacity change from 0 to 512 [ 29.760906][ T3666] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.774043][ T3666] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.785592][ T3666] EXT4-fs (loop4): 1 truncate cleaned up [ 29.791653][ T3666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.826307][ T3671] loop3: detected capacity change from 0 to 256 [ 29.846721][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.894622][ T3674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3674 comm=syz.4.75 [ 29.909319][ T3677] loop1: detected capacity change from 0 to 512 [ 29.919058][ T3677] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 29.938055][ T3677] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 29.946001][ T3677] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 29.958800][ T3677] System zones: 0-1, 15-15, 18-18, 34-34 [ 29.967461][ T3677] EXT4-fs (loop1): orphan cleanup on readonly fs [ 29.973989][ T3677] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 29.988576][ T3677] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 29.992946][ T3688] loop4: detected capacity change from 0 to 512 [ 30.001591][ T3677] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.76: bg 0: block 40: padding at end of block bitmap is not set [ 30.017308][ T3677] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 30.018068][ T3690] loop3: detected capacity change from 0 to 736 [ 30.026236][ T3677] EXT4-fs (loop1): 1 truncate cleaned up [ 30.038649][ T3677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 30.051498][ T3690] iso9660: Bad value for 'mode' [ 30.056973][ T3677] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.76: bad symlink. [ 30.068105][ T3688] EXT4-fs: Ignoring removed bh option [ 30.074872][ T3688] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 30.085449][ T3688] EXT4-fs (loop4): invalid journal inode [ 30.085472][ T3688] EXT4-fs (loop4): can't get journal size [ 30.087235][ T3677] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.76: bad symlink. [ 30.087466][ T3688] EXT4-fs (loop4): 1 truncate cleaned up [ 30.087836][ T3688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.088346][ T3677] 9pnet: Unknown protocol version 9p‹÷÷ï-æ%‰ [ 30.099437][ T3677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.169272][ T3701] loop1: detected capacity change from 0 to 764 [ 30.181317][ T3701] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 30.236948][ T3713] syz.0.84 uses obsolete (PF_INET,SOCK_PACKET) [ 30.250393][ T3259] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1828716567: comm syz-executor: invalid block [ 30.258504][ T3715] loop1: detected capacity change from 0 to 1764 [ 30.263506][ T3259] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1828716567: comm syz-executor: invalid block [ 30.271442][ T3715] iso9660: Unknown parameter '01777777777777777777777¾ŽFPQ3¦Hjuó‹­}fþ?.‰¥xÃ]¿ÝDÌŠzª3Ç•a' `CÚCC£&ó¾' [ 30.302374][ T3715] tracefs: Bad value for 'context' [ 30.317777][ T3715] loop1: detected capacity change from 0 to 2048 [ 30.324441][ T3715] EXT4-fs: Ignoring removed nobh option [ 30.330513][ T3715] EXT4-fs (loop1): #clusters per group too big: 16384 [ 30.377633][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.386960][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.417728][ T3713] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.944382][ T3730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3730 comm=syz.3.89 [ 30.977739][ T3733] loop3: detected capacity change from 0 to 2048 [ 30.993748][ T3735] loop0: detected capacity change from 0 to 128 [ 31.001540][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.010211][ T3735] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.015428][ T3733] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.026547][ T3735] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.071583][ T3733] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #2: block 16: comm syz.3.90: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 31.100457][ T3261] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.119949][ T3740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3740 comm=syz.0.92 [ 31.133244][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.142999][ T3740] geneve2: entered promiscuous mode [ 31.148236][ T3740] geneve2: entered allmulticast mode [ 31.230665][ T3751] loop2: detected capacity change from 0 to 764 [ 31.246754][ T3751] iso9660: Unknown parameter 'ÿÿÿÿ' [ 31.267403][ T3749] loop0: detected capacity change from 0 to 128 [ 31.317823][ T3756] netlink: 'syz.3.98': attribute type 14 has an invalid length. [ 31.325616][ T3756] netlink: 'syz.3.98': attribute type 11 has an invalid length. [ 31.336123][ T3756] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.344877][ T3756] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.353584][ T3756] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.362292][ T3756] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.391143][ T3756] vxlan0: entered promiscuous mode [ 31.397246][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.411826][ T1666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.448665][ T1666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.498269][ T1666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.516828][ T3766] loop2: detected capacity change from 0 to 1024 [ 31.534740][ T3760] loop1: detected capacity change from 0 to 128 [ 31.550622][ T3766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.570401][ T1666] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.575093][ T3766] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.97: attempt to clear invalid blocks 1886221359 len 1 [ 31.608272][ T3760] syz.1.99 (3760) used greatest stack depth: 10056 bytes left [ 31.670217][ T1666] bridge_slave_1: left allmulticast mode [ 31.675915][ T1666] bridge_slave_1: left promiscuous mode [ 31.681620][ T1666] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.684616][ T3779] loop1: detected capacity change from 0 to 256 [ 31.709617][ T1666] bridge_slave_0: left allmulticast mode [ 31.716170][ T1666] bridge_slave_0: left promiscuous mode [ 31.721812][ T1666] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.736584][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 31.736594][ T29] audit: type=1400 audit(1722895236.509:399): avc: denied { read } for pid=3781 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.768957][ T29] audit: type=1400 audit(1722895236.539:400): avc: denied { open } for pid=3781 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.793895][ T29] audit: type=1400 audit(1722895236.539:401): avc: denied { getattr } for pid=3781 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.893855][ T29] audit: type=1400 audit(1722895236.659:402): avc: denied { write } for pid=3780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.916874][ T29] audit: type=1400 audit(1722895236.659:403): avc: denied { add_name } for pid=3780 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.939238][ T29] audit: type=1400 audit(1722895236.659:404): avc: denied { create } for pid=3780 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.968337][ T29] audit: type=1400 audit(1722895236.659:405): avc: denied { write } for pid=3780 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=1181 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.994445][ T29] audit: type=1400 audit(1722895236.659:406): avc: denied { append } for pid=3780 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=1181 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.018646][ T29] audit: type=1400 audit(1722895236.659:407): avc: denied { remove_name } for pid=3792 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1181 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.042046][ T29] audit: type=1400 audit(1722895236.659:408): avc: denied { unlink } for pid=3792 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1181 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.068082][ T1666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.085958][ T1666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.097338][ T1666] bond0 (unregistering): Released all slaves [ 32.203221][ T3802] loop0: detected capacity change from 0 to 1024 [ 32.226463][ T1666] hsr_slave_0: left promiscuous mode [ 32.238427][ T1666] hsr_slave_1: left promiscuous mode [ 32.243174][ T3802] loop0: detected capacity change from 0 to 128 [ 32.254421][ T1666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.254449][ T1666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.254782][ T1666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.254799][ T1666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.258884][ T1666] veth1_macvtap: left promiscuous mode [ 32.258905][ T1666] veth0_macvtap: left promiscuous mode [ 32.258944][ T1666] veth1_vlan: left promiscuous mode [ 32.258995][ T1666] veth0_vlan: left promiscuous mode [ 32.271970][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.510257][ T1666] team0 (unregistering): Port device team_slave_1 removed [ 32.523851][ T1666] team0 (unregistering): Port device team_slave_0 removed [ 32.616456][ T3830] loop0: detected capacity change from 0 to 256 [ 32.627877][ T3828] loop3: detected capacity change from 0 to 1024 [ 32.646425][ T3764] chnl_net:caif_netlink_parms(): no params data found [ 32.676400][ T3828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.729421][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.737674][ T3844] xt_cgroup: xt_cgroup: no path or classid specified [ 32.803544][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.808103][ T3864] loop0: detected capacity change from 0 to 128 [ 32.810796][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.825047][ T3864] vfat: Unknown parameter '0000000000000000000001000000000000000000003' [ 32.835649][ T3764] bridge_slave_0: entered allmulticast mode [ 32.842209][ T3764] bridge_slave_0: entered promiscuous mode [ 32.886380][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.893527][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.903823][ T3764] bridge_slave_1: entered allmulticast mode [ 32.915207][ T3874] loop3: detected capacity change from 0 to 764 [ 32.915333][ T3764] bridge_slave_1: entered promiscuous mode [ 32.922323][ T3874] iso9660: Unknown parameter 'ÿÿÿÿ' [ 32.964812][ T3764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.975512][ T3764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.010026][ T3764] team0: Port device team_slave_0 added [ 33.022060][ T3764] team0: Port device team_slave_1 added [ 33.056364][ T3764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.063335][ T3764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.089479][ T3764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.101001][ T3764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.107984][ T3764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.133957][ T3764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.162777][ T3764] hsr_slave_0: entered promiscuous mode [ 33.168805][ T3764] hsr_slave_1: entered promiscuous mode [ 33.255919][ T3898] loop3: detected capacity change from 0 to 1024 [ 33.328300][ T3898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.372758][ T3898] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #14: comm syz.3.114: attempt to clear invalid blocks 1886221359 len 1 [ 33.516801][ T3764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.527785][ T3764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.544715][ T3764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.574757][ T3764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.615127][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.622256][ T3764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.629573][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.636643][ T3764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.657398][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.690289][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.741097][ T3963] loop0: detected capacity change from 0 to 512 [ 33.774840][ T3963] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 33.794838][ T3967] loop1: detected capacity change from 0 to 512 [ 33.815330][ T3963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3963 comm=syz.0.119 [ 33.815696][ T3967] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 33.887467][ T3963] __nla_validate_parse: 5 callbacks suppressed [ 33.887480][ T3963] netlink: 108 bytes leftover after parsing attributes in process `syz.0.119'. [ 33.939377][ T3764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.993601][ T3764] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.064108][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.071221][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.124712][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.143347][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.150441][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.163728][ T4012] loop2: detected capacity change from 0 to 512 [ 34.219958][ T4012] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.239983][ T4012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.278034][ T4012] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.123: corrupted in-inode xattr: e_value out of bounds [ 34.320616][ T4012] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.123: couldn't read orphan inode 15 (err -117) [ 34.351286][ T3764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.358895][ T4012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.399857][ T4038] loop3: detected capacity change from 0 to 1024 [ 34.452759][ T4038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.500174][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.510206][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.619039][ T3764] veth0_vlan: entered promiscuous mode [ 34.643241][ T3764] veth1_vlan: entered promiscuous mode [ 34.658556][ T4074] loop2: detected capacity change from 0 to 128 [ 34.677493][ T3764] veth0_macvtap: entered promiscuous mode [ 34.703504][ T3764] veth1_macvtap: entered promiscuous mode [ 34.726384][ T3764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.736914][ T3764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.746774][ T3764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.757402][ T3764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.767255][ T3764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.777732][ T3764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.787671][ T3764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.798120][ T3764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.816060][ T3764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.869529][ T4080] syzkaller0: entered promiscuous mode [ 34.875088][ T4080] syzkaller0: entered allmulticast mode [ 34.883984][ T3764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.894662][ T3764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.904511][ T3764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.915055][ T3764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.925242][ T3764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.935677][ T3764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.945631][ T3764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.956093][ T3764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.970125][ T3764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.982860][ T3764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.991669][ T3764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.000393][ T3764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.009115][ T3764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.112102][ T4091] loop0: detected capacity change from 0 to 512 [ 35.119865][ T4087] loop4: detected capacity change from 0 to 1024 [ 35.135680][ T4087] EXT4-fs: Invalid want_extra_isize 127 [ 35.161002][ T4093] loop3: detected capacity change from 0 to 2048 [ 35.205752][ T4093] loop3: p1 p2 p4 [ 35.210850][ T4093] loop3: p4 start 4294967040 is beyond EOD, truncated [ 35.233775][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 35.249123][ T4093] loop3: detected capacity change from 0 to 512 [ 35.254932][ T3246] udevd[3246]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.487977][ T4103] syzkaller1: entered allmulticast mode [ 35.509364][ T4103] loop3: detected capacity change from 0 to 1024 [ 35.537305][ T4103] EXT4-fs: Ignoring removed orlov option [ 35.552981][ T4103] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.573926][ T4106] loop2: detected capacity change from 0 to 128 [ 35.581644][ T4103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.123099][ T4149] loop2: detected capacity change from 0 to 4096 [ 36.137002][ T4149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.158047][ T4151] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 36.184809][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.225627][ T4159] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 36.250970][ T4159] loop2: detected capacity change from 0 to 512 [ 36.260796][ T4159] EXT4-fs: Ignoring removed oldalloc option [ 36.278304][ T4159] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 36.289267][ T4161] loop0: detected capacity change from 0 to 1024 [ 36.317277][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.327374][ T4161] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 36.327374][ T4161] [ 36.338243][ T4161] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 36.386847][ T4163] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 36.405194][ T4165] loop3: detected capacity change from 0 to 512 [ 36.411650][ T4165] EXT4-fs: Ignoring removed i_version option [ 36.417755][ T4165] EXT4-fs: Ignoring removed nobh option [ 36.429316][ T4161] bridge0: entered promiscuous mode [ 36.455345][ T4165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.475966][ T4163] loop2: detected capacity change from 0 to 2048 [ 36.482407][ T4161] bridge0: left promiscuous mode [ 36.489202][ T4165] EXT4-fs (loop3): 1 truncate cleaned up [ 36.495524][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.540737][ T4165] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 36.554350][ T4163] loop2: p1 p2 p4 [ 36.561136][ T4163] loop2: p4 start 4294967040 is beyond EOD, truncated [ 36.577795][ T2960] loop2: p1 p2 p4 [ 36.585089][ T2960] loop2: p4 start 4294967040 is beyond EOD, truncated [ 36.608893][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.661149][ T4170] loop3: detected capacity change from 0 to 512 [ 36.686680][ T4170] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.701132][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 36.712908][ T3246] udevd[3246]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.744844][ T4170] EXT4-fs (loop3): 1 truncate cleaned up [ 36.748835][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 36.750882][ T4170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.761985][ T3246] udevd[3246]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.815986][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 36.816000][ T29] audit: type=1400 audit(1722895241.589:521): avc: denied { ioctl } for pid=4169 comm="syz.3.153" path="/36/file1/memory.events" dev="loop3" ino=18 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.861013][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.892023][ T29] audit: type=1400 audit(1722895241.619:522): avc: denied { execute } for pid=4185 comm="syz.0.156" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=6504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 36.917522][ T29] audit: type=1400 audit(1722895241.619:523): avc: denied { bind } for pid=4169 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.983050][ T4196] loop2: detected capacity change from 0 to 512 [ 37.007176][ T4197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 37.027709][ T29] audit: type=1326 audit(1722895241.769:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.4.160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8bc7179f9 code=0x0 [ 37.062473][ T4215] loop1: detected capacity change from 0 to 256 [ 37.069785][ T4196] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 37.101678][ T29] audit: type=1326 audit(1722895241.869:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4214 comm="syz.1.163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84796879f9 code=0x0 [ 37.134231][ T29] audit: type=1400 audit(1722895241.899:526): avc: denied { write } for pid=4210 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.172435][ T29] audit: type=1400 audit(1722895241.909:527): avc: denied { create } for pid=4223 comm="syz.2.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 37.203000][ T4213] infiniband syz1: set down [ 37.207579][ T4213] infiniband syz1: added ipvlan1 [ 37.216400][ T4229] pim6reg: entered allmulticast mode [ 37.220615][ T29] audit: type=1400 audit(1722895241.969:528): avc: denied { setopt } for pid=4222 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.223049][ T4229] pim6reg: left allmulticast mode [ 37.244358][ T4224] 9p: Unknown Cache mode or invalid value fsc€ùhe [ 37.257593][ T4225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.259114][ T29] audit: type=1326 audit(1722895242.029:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4210 comm="syz.3.161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54503e79f9 code=0x0 [ 37.269662][ T4225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.297150][ T4213] RDS/IB: syz1: added [ 37.303511][ T4213] smc: adding ib device syz1 with port count 1 [ 37.309967][ T4213] smc: ib device syz1 port 1 has pnetid [ 37.337284][ T4236] loop1: detected capacity change from 0 to 512 [ 37.375820][ T29] audit: type=1400 audit(1722895242.139:530): avc: denied { write } for pid=4237 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.381167][ T4212] syzkaller0: entered promiscuous mode [ 37.403213][ T4212] syzkaller0: entered allmulticast mode [ 37.410241][ T4236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.423506][ T4248] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.428727][ T4249] loop3: detected capacity change from 0 to 512 [ 37.448980][ T4249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.459738][ T4249] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 37.468216][ T4249] System zones: 1-12 [ 37.474881][ T4249] EXT4-fs (loop3): 1 truncate cleaned up [ 37.481042][ T4249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.482916][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.526055][ T4254] loop4: detected capacity change from 0 to 128 [ 37.598734][ T4264] loop1: detected capacity change from 0 to 512 [ 37.619394][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 37.643193][ T4267] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 37.689444][ T4276] netlink: 52 bytes leftover after parsing attributes in process `syz.4.174'. [ 37.698451][ T4276] netlink: 52 bytes leftover after parsing attributes in process `syz.4.174'. [ 37.709481][ T4276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.729936][ T4276] loop4: detected capacity change from 0 to 256 [ 37.738848][ T4278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.175'. [ 37.749970][ T4276] TCP: TCP_TX_DELAY enabled [ 37.822108][ T4289] dvmrp0: entered allmulticast mode [ 37.830240][ T4291] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 37.837977][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 37.855857][ T4288] dvmrp0: left allmulticast mode [ 37.915432][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.963126][ T4295] loop3: detected capacity change from 0 to 512 [ 37.963360][ T4297] loop1: detected capacity change from 0 to 512 [ 37.985506][ T3335] kernel write not supported for file bpf-prog (pid: 3335 comm: kworker/1:3) [ 37.995746][ T4295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.009960][ T4295] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.018863][ T4304] loop1: detected capacity change from 0 to 512 [ 38.032340][ T4304] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.183: casefold flag without casefold feature [ 38.049939][ T4295] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.181: corrupted inode contents [ 38.052156][ T4304] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.183: couldn't read orphan inode 15 (err -117) [ 38.062818][ T4295] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #19: comm syz.3.181: mark_inode_dirty error [ 38.074763][ T4304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.098721][ T4295] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.181: corrupted inode contents [ 38.111008][ T4295] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3007: inode #19: comm syz.3.181: mark_inode_dirty error [ 38.123597][ T4295] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3010: inode #19: comm syz.3.181: mark inode dirty (error -117) [ 38.124470][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.136451][ T4295] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 38.172521][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.218704][ T4309] loop4: detected capacity change from 0 to 512 [ 38.228276][ T4309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.239828][ T4309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 38.248236][ T4309] System zones: 1-12 [ 38.253369][ T4309] EXT4-fs (loop4): 1 truncate cleaned up [ 38.264706][ T4309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.316474][ T4331] loop0: detected capacity change from 0 to 512 [ 38.321708][ T3764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.342789][ T4334] loop3: detected capacity change from 0 to 512 [ 38.343488][ T4331] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.191: iget: bad i_size value: -2594073385365405596 [ 38.366475][ T4331] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.191: couldn't read orphan inode 17 (err -117) [ 38.368653][ T4334] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.385684][ T4338] loop4: detected capacity change from 0 to 256 [ 38.390509][ T4331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.407016][ T4338] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 38.426452][ T4334] EXT4-fs (loop3): 1 orphan inode deleted [ 38.432211][ T4334] EXT4-fs (loop3): 1 truncate cleaned up [ 38.460868][ T4334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.473745][ T4338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4338 comm=syz.4.190 [ 38.493117][ T4334] 9pnet_fd: Insufficient options for proto=fd [ 38.499789][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.502990][ T4334] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 38.548175][ T4334] EXT4-fs (loop3): Remounting filesystem read-only [ 38.602486][ T4350] capability: warning: `syz.4.195' uses 32-bit capabilities (legacy support in use) [ 38.647924][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.224747][ T4383] loop1: detected capacity change from 0 to 512 [ 39.235993][ T4383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.248590][ T4383] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.460066][ T4388] block device autoloading is deprecated and will be removed. [ 39.740637][ T4396] loop0: detected capacity change from 0 to 512 [ 39.747594][ T4396] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.759144][ T4396] EXT4-fs (loop0): 1 truncate cleaned up [ 39.766332][ T4396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.790083][ T4396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.006605][ T4422] loop2: detected capacity change from 0 to 128 [ 40.020710][ T4422] vfat: Unknown parameter 'ÿÿÿÿ' [ 40.062814][ T4426] loop2: detected capacity change from 0 to 128 [ 40.095193][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.178504][ T4443] loop2: detected capacity change from 0 to 512 [ 40.195474][ T4443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.208989][ T4443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.218837][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.232559][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.259395][ T4443] loop2: detected capacity change from 0 to 128 [ 40.269034][ T4443] vfat: Unknown parameter 'attr/sockcreate' [ 40.308528][ T4448] loop2: detected capacity change from 0 to 512 [ 40.319481][ T4448] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 40.331054][ T4448] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 40.341250][ T4448] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.220: Corrupt directory, running e2fsck is recommended [ 40.360113][ T4448] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 40.368502][ T4448] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.220: corrupted in-inode xattr: invalid ea_ino [ 40.383534][ T4448] EXT4-fs (loop2): Remounting filesystem read-only [ 40.390461][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.404354][ T4448] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 40.411275][ T4448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.512149][ T4464] loop2: detected capacity change from 0 to 512 [ 40.526450][ T4464] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.543386][ T4464] EXT4-fs (loop2): 1 truncate cleaned up [ 40.557132][ T4464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.632439][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.675447][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 40.687984][ T4487] loop2: detected capacity change from 0 to 512 [ 40.708028][ T4487] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.224: casefold flag without casefold feature [ 40.728119][ T4487] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.224: couldn't read orphan inode 15 (err -117) [ 40.740790][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.785409][ T4498] syz.4.227[4498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.785555][ T4498] syz.4.227[4498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.822237][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.845753][ T4498] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 40.941315][ T4523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 40.973272][ T4523] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.228'. [ 41.016482][ T4530] sctp: [Deprecated]: syz.3.233 (pid 4530) Use of int in max_burst socket option deprecated. [ 41.016482][ T4530] Use struct sctp_assoc_value instead [ 41.060941][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 41.102280][ T4540] loop3: detected capacity change from 0 to 512 [ 41.109550][ T4540] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 41.120907][ T4540] block device autoloading is deprecated and will be removed. [ 41.129527][ T4540] syz.3.236: attempt to access beyond end of device [ 41.129527][ T4540] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 41.142602][ T4540] EXT4-fs (loop3): couldn't read superblock of external journal [ 41.190818][ T4547] netlink: 'syz.1.238': attribute type 21 has an invalid length. [ 41.205169][ T4551] SET target dimension over the limit! [ 41.208597][ T4547] devpts: called with bogus options [ 41.223540][ T4550] loop4: detected capacity change from 0 to 1024 [ 41.236170][ T4550] EXT4-fs: Ignoring removed oldalloc option [ 41.242107][ T4550] EXT4-fs: Ignoring removed orlov option [ 41.262859][ T4550] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 41.284184][ T4550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.343256][ T3764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.739405][ T4570] netlink: 'syz.1.242': attribute type 4 has an invalid length. [ 41.768810][ T4572] loop2: detected capacity change from 0 to 128 [ 41.788032][ T4574] netlink: 'syz.4.244': attribute type 1 has an invalid length. [ 41.789583][ T4572] loop2: detected capacity change from 0 to 512 [ 41.795806][ T4574] netlink: 'syz.4.244': attribute type 4 has an invalid length. [ 41.809777][ T4574] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.244'. [ 41.823539][ T3336] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 41.832940][ T3336] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 41.839238][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 41.839249][ T29] audit: type=1400 audit(1722895246.609:605): avc: denied { ioctl } for pid=4575 comm="syz.1.245" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.877082][ T29] audit: type=1400 audit(1722895246.619:606): avc: denied { read } for pid=4579 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 41.877849][ T4572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.897553][ T29] audit: type=1400 audit(1722895246.619:607): avc: denied { ioctl } for pid=4579 comm="syz.4.246" path="socket:[8346]" dev="sockfs" ino=8346 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 41.928509][ T4572] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.935662][ T29] audit: type=1400 audit(1722895246.679:608): avc: denied { create } for pid=4579 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 41.966243][ T29] audit: type=1400 audit(1722895246.679:609): avc: denied { module_request } for pid=4579 comm="syz.4.246" kmod="net-pf-16-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 42.016153][ T4592] loop3: detected capacity change from 0 to 256 [ 42.033101][ T4592] msdos: Bad value for 'time_offset' [ 42.039513][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.109173][ T29] audit: type=1400 audit(1722895246.849:610): avc: denied { read write } for pid=4589 comm="syz.4.248" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.132722][ T29] audit: type=1400 audit(1722895246.849:611): avc: denied { open } for pid=4589 comm="syz.4.248" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.139068][ T4600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.250'. [ 42.263791][ T4600] loop1: detected capacity change from 0 to 764 [ 42.270912][ T4600] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 42.280501][ T29] audit: type=1400 audit(1722895247.049:612): avc: denied { search } for pid=2942 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.413491][ T4612] loop2: detected capacity change from 0 to 512 [ 42.423261][ T4612] EXT4-fs: Ignoring removed bh option [ 42.436305][ T4612] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.253: invalid block [ 42.461802][ T4612] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.253: couldn't read orphan inode 15 (err -117) [ 42.499827][ T4619] loop3: detected capacity change from 0 to 256 [ 42.506396][ T4619] vfat: Unknown parameter 'nogumtail' [ 42.528495][ T29] audit: type=1400 audit(1722895247.259:613): avc: denied { setopt } for pid=4618 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.552879][ T4612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.568778][ T4623] loop3: detected capacity change from 0 to 512 [ 42.575367][ T4623] EXT4-fs: Ignoring removed orlov option [ 42.586196][ T4623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 42.594156][ T4623] System zones: 1-12 [ 42.602518][ T29] audit: type=1400 audit(1722895247.369:614): avc: denied { connect } for pid=4620 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.610503][ T4623] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.254: casefold flag without casefold feature [ 42.629515][ T4628] loop4: detected capacity change from 0 to 512 [ 42.637532][ T4623] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.254: couldn't read orphan inode 15 (err -117) [ 42.653807][ T4623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.656578][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.672122][ T4628] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.683580][ T4628] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.690861][ T4628] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 42.705981][ T4628] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 42.714191][ T4628] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.256: bg 0: block 40: padding at end of block bitmap is not set [ 42.736973][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 42.742115][ T4628] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 42.745775][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 42.770112][ T4628] EXT4-fs (loop4): 1 truncate cleaned up [ 42.777386][ T4633] tipc: Started in network mode [ 42.782288][ T4633] tipc: Node identity f7, cluster identity 4711 [ 42.782771][ T4628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.788630][ T4633] tipc: Node number set to 247 [ 42.806619][ T4628] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.256: corrupted xattr block 31: invalid header [ 42.819932][ T4628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 42.832924][ T4628] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.256: corrupted xattr block 31: invalid header [ 42.846702][ T4628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 42.856071][ T4628] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.256: bad symlink. [ 42.877058][ T3764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.063510][ T4648] loop0: detected capacity change from 0 to 1024 [ 43.106960][ T4648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.253205][ T4648] netlink: 56 bytes leftover after parsing attributes in process `syz.0.261'. [ 43.328782][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.465223][ T4668] loop4: detected capacity change from 0 to 256 [ 43.492798][ T4668] netlink: 256 bytes leftover after parsing attributes in process `syz.4.266'. [ 43.523331][ T4668] tipc: Failed to obtain node identity [ 43.528925][ T4668] tipc: Enabling of bearer rejected, failed to enable media [ 43.618395][ T4672] loop4: detected capacity change from 0 to 512 [ 43.640358][ T4672] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.664899][ T4672] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.267: bg 0: block 248: padding at end of block bitmap is not set [ 43.681068][ T4676] loop2: detected capacity change from 0 to 256 [ 43.699739][ T4676] vfat: Unknown parameter 'nnonumtail' [ 43.719544][ T4672] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.267: Failed to acquire dquot type 1 [ 43.767870][ T4672] EXT4-fs (loop4): 1 truncate cleaned up [ 43.787295][ T4672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.829963][ T4672] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 43.865532][ T4672] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 43.968212][ T4672] syz.4.267 (4672) used greatest stack depth: 8784 bytes left [ 43.993838][ T3764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.066198][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 44.082083][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.191773][ T4697] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 44.318956][ T4705] process 'syz.0.275' launched './file0' with NULL argv: empty string added [ 44.329132][ T4705] team_slave_0: entered allmulticast mode [ 44.341206][ T4705] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 44.383789][ T4708] loop4: detected capacity change from 0 to 512 [ 44.394523][ T4708] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 44.468259][ T4727] loop0: detected capacity change from 0 to 128 [ 44.605455][ T4739] futex_wake_op: syz.4.279 tries to shift op by 36; fix this program [ 44.634377][ T4739] xt_TCPMSS: Only works on TCP SYN packets [ 44.654088][ C0] hrtimer: interrupt took 18065 ns [ 44.733189][ T4727] loop0: detected capacity change from 0 to 512 [ 44.746719][ T4727] EXT4-fs: Ignoring removed orlov option [ 44.752631][ T4727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.779260][ T4727] EXT4-fs: Mount option(s) incompatible with ext3 [ 44.888739][ T4727] loop0: detected capacity change from 0 to 512 [ 44.915003][ T4727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.930797][ T4727] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.948053][ T4727] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 44.974013][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.507508][ T4782] loop0: detected capacity change from 0 to 512 [ 45.525788][ T4782] EXT4-fs: Ignoring removed nobh option [ 45.532232][ T4782] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.548934][ T4791] loop2: detected capacity change from 0 to 1024 [ 45.586765][ T4782] EXT4-fs (loop0): 1 truncate cleaned up [ 45.607367][ T4782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.659599][ T4791] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 45.678917][ T4782] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 13: comm syz.0.294: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 45.701793][ T4782] EXT4-fs (loop0): Remounting filesystem read-only [ 45.760014][ T4803] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.771806][ T4782] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.781863][ T4782] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.782903][ T4776] loop3: detected capacity change from 0 to 512 [ 45.798611][ T4776] EXT4-fs: Invalid want_extra_isize 0 [ 45.828536][ T4806] loop1: detected capacity change from 0 to 512 [ 45.833076][ T4806] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.299: bg 0: block 393: padding at end of block bitmap is not set [ 45.833225][ T4806] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 45.833431][ T4806] EXT4-fs (loop1): 2 truncates cleaned up [ 45.835534][ T4806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.839423][ T4791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=4791 comm=syz.2.295 [ 45.857429][ T4776] loop3: detected capacity change from 0 to 256 [ 45.912122][ T4776] vfat: Bad value for 'dmask' [ 45.966554][ T4812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.011873][ T1666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.098717][ T1666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.163201][ T1666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.165675][ T4819] loop2: detected capacity change from 0 to 8192 [ 46.185025][ T4819] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.202992][ T4819] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 46.210171][ T4819] FAT-fs (loop2): Filesystem has been set read-only [ 46.217290][ T4819] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 46.264691][ T1666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.362563][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 46.376857][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 46.388333][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 46.397525][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 46.407560][ T1666] bridge_slave_1: left allmulticast mode [ 46.413282][ T1666] bridge_slave_1: left promiscuous mode [ 46.414161][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 46.418991][ T1666] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.430629][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 46.448591][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 46.458490][ T1666] bridge_slave_0: left allmulticast mode [ 46.460229][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 46.464158][ T1666] bridge_slave_0: left promiscuous mode [ 46.473013][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 46.478480][ T1666] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.495655][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.507656][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.522906][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.532234][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.541329][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.558702][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.575873][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 46.594573][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.609968][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 46.629993][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.642466][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.659197][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 46.681174][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.698587][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 46.707707][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.718266][ T3261] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.727984][ T1666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.738475][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.756124][ T1666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.771799][ T1666] bond0 (unregistering): Released all slaves [ 46.773254][ T4861] loop0: detected capacity change from 0 to 764 [ 46.789223][ T4861] iso9660: Unknown parameter 'ÿÿÿÿ' [ 46.880534][ T4863] loop4: detected capacity change from 0 to 764 [ 46.890102][ T4863] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 46.911293][ T4859] __nla_validate_parse: 4 callbacks suppressed [ 46.911315][ T4859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.310'. [ 46.930421][ T4815] chnl_net:caif_netlink_parms(): no params data found [ 46.948298][ T1666] tipc: Left network mode [ 47.097543][ T4815] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.104869][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.127708][ T4815] bridge_slave_0: entered allmulticast mode [ 47.164134][ T4815] bridge_slave_0: entered promiscuous mode [ 47.166509][ T4871] loop4: detected capacity change from 0 to 512 [ 47.194182][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.201265][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.210687][ T4815] bridge_slave_1: entered allmulticast mode [ 47.248320][ T4815] bridge_slave_1: entered promiscuous mode [ 47.272191][ T4871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.285626][ T1666] hsr_slave_0: left promiscuous mode [ 47.292376][ T4871] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.305342][ T1666] hsr_slave_1: left promiscuous mode [ 47.312172][ T1666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.319742][ T1666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.333035][ T1666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.340546][ T1666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.380509][ T1666] veth1_macvtap: left promiscuous mode [ 47.386052][ T1666] veth0_macvtap: left promiscuous mode [ 47.391768][ T1666] veth1_vlan: left promiscuous mode [ 47.397151][ T1666] veth0_vlan: left promiscuous mode [ 47.693605][ T1666] team0 (unregistering): Port device team_slave_1 removed [ 47.782392][ T1666] team0 (unregistering): Port device team_slave_0 removed [ 48.010952][ T4899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=4899 comm=syz.0.314 [ 48.074816][ T4871] bond0: entered promiscuous mode [ 48.079948][ T4871] bond_slave_0: entered promiscuous mode [ 48.085704][ T4871] bond_slave_1: entered promiscuous mode [ 48.091585][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.098825][ T4898] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.145792][ T4815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.157425][ T4815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.168764][ T4901] loop2: detected capacity change from 0 to 256 [ 48.192900][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 48.192913][ T29] audit: type=1400 audit(1722895252.959:642): avc: denied { mounton } for pid=4900 comm="syz.2.315" path="/64/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 48.234828][ T4815] team0: Port device team_slave_0 added [ 48.245766][ T4815] team0: Port device team_slave_1 added [ 48.269865][ T29] audit: type=1326 audit(1722895253.039:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaea7f79f9 code=0x7ffc0000 [ 48.281181][ T4903] loop0: detected capacity change from 0 to 1024 [ 48.293385][ T29] audit: type=1326 audit(1722895253.039:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaea7f79f9 code=0x7ffc0000 [ 48.304455][ T4903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.326398][ T29] audit: type=1326 audit(1722895253.039:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdaea7f79f9 code=0x7ffc0000 [ 48.353319][ T29] audit: type=1326 audit(1722895253.039:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaea7f79f9 code=0x7ffc0000 [ 48.376528][ T29] audit: type=1326 audit(1722895253.039:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaea7f79f9 code=0x7ffc0000 [ 48.386406][ T4903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.399964][ T29] audit: type=1326 audit(1722895253.039:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdaea7f79f9 code=0x7ffc0000 [ 48.435220][ T29] audit: type=1326 audit(1722895253.039:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaea7f79f9 code=0x7ffc0000 [ 48.458541][ T29] audit: type=1326 audit(1722895253.039:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdaea7f79f9 code=0x7ffc0000 [ 48.481776][ T29] audit: type=1326 audit(1722895253.039:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdaea7f7a33 code=0x7ffc0000 [ 48.534421][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.541378][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.567379][ T4815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.585871][ T4870] bond0: left promiscuous mode [ 48.590663][ T4870] bond_slave_0: left promiscuous mode [ 48.596160][ T4870] bond_slave_1: left promiscuous mode [ 48.608276][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.615246][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.617018][ T4909] loop3: detected capacity change from 0 to 256 [ 48.641169][ T4815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.665975][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.702225][ T4815] hsr_slave_0: entered promiscuous mode [ 48.714590][ T4815] hsr_slave_1: entered promiscuous mode [ 48.728495][ T4815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.741892][ T4815] Cannot create hsr debugfs directory [ 48.755036][ T3764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.777341][ T4925] loop3: detected capacity change from 0 to 764 [ 48.783846][ T4925] iso9660: Unknown parameter 'ÿÿÿÿ' [ 48.908767][ T4940] loop4: detected capacity change from 0 to 764 [ 48.911350][ T4930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.323'. [ 48.958410][ T4940] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 48.981041][ T4933] loop0: detected capacity change from 0 to 2048 [ 49.085990][ T4933] loop0: detected capacity change from 0 to 256 [ 49.207830][ T1666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.301685][ T1666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.388388][ T1666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.458033][ T1666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.471971][ T4986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 49.484531][ T4986] loop0: detected capacity change from 0 to 512 [ 49.516331][ T4926] chnl_net:caif_netlink_parms(): no params data found [ 49.541455][ T4994] batadv_slave_0: entered promiscuous mode [ 49.559376][ T4994] loop0: detected capacity change from 0 to 512 [ 49.605192][ T5003] loop4: detected capacity change from 0 to 1024 [ 49.613004][ T4994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.625880][ T4994] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.650739][ T4994] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.332: Directory hole found for htree leaf block 0 [ 49.674575][ T5003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.695390][ T1666] bridge_slave_1: left allmulticast mode [ 49.701045][ T1666] bridge_slave_1: left promiscuous mode [ 49.706748][ T1666] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.714862][ T4994] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.332: Directory hole found for htree leaf block 0 [ 49.728358][ T1666] bridge_slave_0: left allmulticast mode [ 49.734020][ T1666] bridge_slave_0: left promiscuous mode [ 49.739721][ T1666] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.791218][ T3764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.835222][ T5029] loop4: detected capacity change from 0 to 256 [ 49.841914][ T5029] msdos: Bad value for 'errors' [ 49.917176][ T1666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.919227][ T5034] loop4: detected capacity change from 0 to 512 [ 49.936270][ T1666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.938616][ T5034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.957814][ T5034] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.969773][ T1666] bond0 (unregistering): Released all slaves [ 49.978210][ T1666] bond1 (unregistering): Released all slaves [ 49.992669][ T4926] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.999771][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.007287][ T4926] bridge_slave_0: entered allmulticast mode [ 50.013655][ T4926] bridge_slave_0: entered promiscuous mode [ 50.026083][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 50.026981][ T4926] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.042253][ T4926] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.049540][ T4926] bridge_slave_1: entered allmulticast mode [ 50.055912][ T4926] bridge_slave_1: entered promiscuous mode [ 50.061936][ T4993] batadv_slave_0: left promiscuous mode [ 50.083773][ T4926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.095027][ T4926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.108900][ T3261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.120413][ T4926] team0: Port device team_slave_0 added [ 50.129421][ T4926] team0: Port device team_slave_1 added [ 50.145931][ T4926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.150463][ T5042] loop0: detected capacity change from 0 to 512 [ 50.152944][ T4926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.171542][ T5042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.185110][ T4926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.200014][ T5042] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.209746][ T4926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.225327][ T4926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.251402][ T4926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.301306][ T4926] hsr_slave_0: entered promiscuous mode [ 50.309225][ T5042] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.338: corrupted inode contents [ 50.322128][ T4926] hsr_slave_1: entered promiscuous mode [ 50.323385][ T5042] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #19: comm syz.0.338: mark_inode_dirty error [ 50.339059][ T4926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.339241][ T5042] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.338: corrupted inode contents [ 50.346630][ T4926] Cannot create hsr debugfs directory [ 50.363909][ T5042] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3007: inode #19: comm syz.0.338: mark_inode_dirty error [ 50.376017][ T5042] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3010: inode #19: comm syz.0.338: mark inode dirty (error -117) [ 50.392245][ T1666] hsr_slave_0: left promiscuous mode [ 50.398171][ T1666] hsr_slave_1: left promiscuous mode [ 50.403729][ T5042] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 50.414747][ T1666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.422161][ T1666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.431205][ T1666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.438690][ T1666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.447755][ T1666] veth1_macvtap: left promiscuous mode [ 50.453302][ T1666] veth0_macvtap: left promiscuous mode [ 50.458973][ T1666] veth1_vlan: left promiscuous mode [ 50.464236][ T1666] veth0_vlan: left promiscuous mode [ 50.563713][ T1666] team0 (unregistering): Port device team_slave_1 removed [ 50.576052][ T1666] team0 (unregistering): Port device team_slave_0 removed [ 50.583278][ T5065] loop0: detected capacity change from 0 to 2048 [ 50.751331][ T4815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.768874][ T4815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.778447][ T4815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.796117][ T4815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.799651][ T5076] loop3: detected capacity change from 0 to 256 [ 50.822286][ T5090] loop4: detected capacity change from 0 to 1024 [ 50.877107][ T5099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.896884][ T5099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.918304][ T4815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.952342][ T4815] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.964654][ T5107] FAULT_INJECTION: forcing a failure. [ 50.964654][ T5107] name failslab, interval 1, probability 0, space 0, times 1 [ 50.964958][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.977342][ T5107] CPU: 1 UID: 0 PID: 5107 Comm: syz.3.344 Not tainted 6.11.0-rc2-syzkaller #0 [ 50.984345][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.993121][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 51.010441][ T5107] Call Trace: [ 51.013782][ T5107] [ 51.016709][ T5107] dump_stack_lvl+0xf2/0x150 [ 51.021297][ T5107] dump_stack+0x15/0x20 [ 51.025445][ T5107] should_fail_ex+0x229/0x230 [ 51.030130][ T5107] ? jbd2__journal_start+0xe8/0x3e0 [ 51.035414][ T5107] should_failslab+0x8f/0xb0 [ 51.040004][ T5107] kmem_cache_alloc_noprof+0x4c/0x290 [ 51.045372][ T5107] jbd2__journal_start+0xe8/0x3e0 [ 51.050482][ T5107] __ext4_journal_start_sb+0xd5/0x340 [ 51.055851][ T5107] ? _parse_integer_limit+0x167/0x180 [ 51.061214][ T5107] ext4_fileattr_set+0x62e/0xde0 [ 51.066180][ T5107] ? fileattr_fill_flags+0x188/0x1b0 [ 51.071569][ T5107] vfs_fileattr_set+0x59e/0x5f0 [ 51.076416][ T5107] do_vfs_ioctl+0x1267/0x1560 [ 51.081085][ T5107] ? __fget_files+0x1da/0x210 [ 51.085770][ T5107] __se_sys_ioctl+0x81/0x150 [ 51.090700][ T5107] __x64_sys_ioctl+0x43/0x50 [ 51.095330][ T5107] x64_sys_call+0x15cc/0x2d60 [ 51.100007][ T5107] do_syscall_64+0xc9/0x1c0 [ 51.104573][ T5107] ? clear_bhb_loop+0x55/0xb0 [ 51.109295][ T5107] ? clear_bhb_loop+0x55/0xb0 [ 51.113971][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.119953][ T5107] RIP: 0033:0x7f54503e79f9 [ 51.124470][ T5107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.144142][ T5107] RSP: 002b:00007f544f046048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.152613][ T5107] RAX: ffffffffffffffda RBX: 00007f5450576058 RCX: 00007f54503e79f9 [ 51.160620][ T5107] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 0000000000000007 [ 51.168576][ T5107] RBP: 00007f544f0460a0 R08: 0000000000000000 R09: 0000000000000000 [ 51.176531][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.184576][ T5107] R13: 000000000000006e R14: 00007f5450576058 R15: 00007ffde7bd14a8 [ 51.192537][ T5107] [ 51.204823][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.211986][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.230736][ T4926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.243985][ T4926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.262148][ T5108] loop4: detected capacity change from 0 to 2048 [ 51.268855][ T4815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.290349][ T5107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.344'. [ 51.303495][ T4926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.313942][ T4926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.327228][ T5108] EXT4-fs (loop4): shut down requested (0) [ 51.394500][ T4926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.402883][ T5125] ieee802154 phy1 wpan1: encryption failed: -90 [ 51.409179][ T4926] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.431945][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.439110][ T3320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.449334][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.456412][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.472926][ T4815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.531578][ T5125] loop4: detected capacity change from 0 to 8192 [ 51.547933][ T5125] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.620122][ T4926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.646609][ T4815] veth0_vlan: entered promiscuous mode [ 51.659176][ T4815] veth1_vlan: entered promiscuous mode [ 51.677338][ T4815] veth0_macvtap: entered promiscuous mode [ 51.685302][ T4815] veth1_macvtap: entered promiscuous mode [ 51.702734][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.713322][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.723231][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.733764][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.743747][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.754260][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.769565][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.793327][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.804021][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.813991][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.824451][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.834270][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.844770][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.856634][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.867397][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.898226][ T4815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.907068][ T4815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.915818][ T4815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.924619][ T4815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.016044][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.036179][ T4926] veth0_vlan: entered promiscuous mode [ 52.048972][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 52.064771][ T4926] veth1_vlan: entered promiscuous mode [ 52.078431][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.141128][ T4926] veth0_macvtap: entered promiscuous mode [ 52.170032][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.205474][ T4926] veth1_macvtap: entered promiscuous mode [ 52.226399][ T4926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.236896][ T4926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.246739][ T4926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.257168][ T4926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.267009][ T4926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.277487][ T4926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.287345][ T4926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.297768][ T4926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.312292][ T4926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.356669][ T4926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.367247][ T4926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.377083][ T4926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.387532][ T4926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.397364][ T4926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.407875][ T4926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.410488][ T5213] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 52.417673][ T4926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.417688][ T4926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.462071][ T4926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.475300][ T28] bridge_slave_1: left allmulticast mode [ 52.481062][ T28] bridge_slave_1: left promiscuous mode [ 52.486770][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.506788][ T28] bridge_slave_0: left allmulticast mode [ 52.512448][ T28] bridge_slave_0: left promiscuous mode [ 52.518263][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.526868][ T5221] loop4: detected capacity change from 0 to 1024 [ 52.637555][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.649519][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.661028][ T28] bond0 (unregistering): Released all slaves [ 52.677772][ T4926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.686512][ T4926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.695214][ T4926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.703916][ T4926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.791715][ T5236] devpts: called with bogus options [ 52.799045][ T5232] loop4: detected capacity change from 0 to 4096 [ 52.821730][ T5232] EXT4-fs (loop4): can't mount with commit=2, fs mounted w/o journal [ 52.856536][ T28] hsr_slave_0: left promiscuous mode [ 52.878139][ T5242] loop2: detected capacity change from 0 to 512 [ 52.891624][ T28] hsr_slave_1: left promiscuous mode [ 52.903512][ T5232] loop4: detected capacity change from 0 to 1024 [ 52.913783][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.917414][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.921268][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.929762][ T5232] EXT4-fs: Ignoring removed oldalloc option [ 52.947132][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.955797][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.963203][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.972705][ T5242] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.989962][ T28] veth1_macvtap: left promiscuous mode [ 52.990354][ T5232] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 52.995545][ T28] veth0_macvtap: left promiscuous mode [ 53.010793][ T28] veth1_vlan: left promiscuous mode [ 53.016135][ T28] veth0_vlan: left promiscuous mode [ 53.058179][ T5259] loop2: detected capacity change from 0 to 512 [ 53.067500][ T5257] loop1: detected capacity change from 0 to 2048 [ 53.074996][ T5259] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 53.085922][ T5259] EXT4-fs (loop2): invalid journal inode [ 53.093840][ T5259] EXT4-fs (loop2): can't get journal size [ 53.109252][ T5266] loop4: detected capacity change from 0 to 128 [ 53.120176][ T5259] EXT4-fs (loop2): 1 truncate cleaned up [ 53.137951][ T5266] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 53.151999][ T5259] No source specified [ 53.169334][ T5269] loop1: detected capacity change from 0 to 512 [ 53.176684][ T5269] EXT4-fs: Ignoring removed bh option [ 53.190897][ T5269] EXT4-fs error (device loop1): __ext4_iget:4985: inode #15: block 1803188595: comm syz.1.361: invalid block [ 53.209728][ T28] team0 (unregistering): Port device team_slave_1 removed [ 53.224376][ T5269] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.361: couldn't read orphan inode 15 (err -117) [ 53.237240][ T28] team0 (unregistering): Port device team_slave_0 removed [ 53.250781][ T5273] loop2: detected capacity change from 0 to 1024 [ 53.288578][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 53.288592][ T29] audit: type=1400 audit(1722895258.059:726): avc: denied { mounton } for pid=5265 comm="syz.4.360" path="/65/bus/bus" dev="loop4" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 53.327253][ T5249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.355'. [ 53.353748][ T5278] loop1: detected capacity change from 0 to 764 [ 53.364652][ T5278] iso9660: Unknown parameter 'ÿÿÿÿ' [ 53.416059][ T5182] chnl_net:caif_netlink_parms(): no params data found [ 53.423477][ T5283] loop2: detected capacity change from 0 to 764 [ 53.434662][ T3764] FAT-fs (loop4): error, invalid access to FAT (entry 0x0affffff) [ 53.442490][ T3764] FAT-fs (loop4): Filesystem has been set read-only [ 53.466022][ T5283] iso9660: Unknown parameter 'ÿÿÿÿ' [ 53.553581][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.560762][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.594630][ T5182] bridge_slave_0: entered allmulticast mode [ 53.601253][ T5182] bridge_slave_0: entered promiscuous mode [ 53.617509][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.624599][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.638173][ T5182] bridge_slave_1: entered allmulticast mode [ 53.658290][ T5182] bridge_slave_1: entered promiscuous mode [ 53.855566][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.956855][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.967265][ T5309] loop1: detected capacity change from 0 to 1024 [ 54.019772][ T5182] team0: Port device team_slave_0 added [ 54.043374][ T5182] team0: Port device team_slave_1 added [ 54.057609][ T5309] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz.1.363: attempt to clear invalid blocks 1886221359 len 1 [ 54.077128][ T5324] loop3: detected capacity change from 0 to 512 [ 54.091846][ T5324] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.112113][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.119157][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.129335][ T5324] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 54.145189][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.169125][ T5324] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 54.177326][ T5324] System zones: 0-2, 18-18, 34-34 [ 54.183245][ T5324] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.202240][ T5324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.366: bg 0: block 408: padding at end of block bitmap is not set [ 54.216956][ T5324] EXT4-fs (loop3): Remounting filesystem read-only [ 54.223537][ T5324] EXT4-fs (loop3): 1 truncate cleaned up [ 54.232074][ T5324] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 54.232364][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.245696][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.271651][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.371909][ T5324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=5324 comm=syz.3.366 [ 54.388111][ T5182] hsr_slave_0: entered promiscuous mode [ 54.396613][ T5182] hsr_slave_1: entered promiscuous mode [ 54.411830][ T29] audit: type=1326 audit(1722895259.179:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.435082][ T29] audit: type=1326 audit(1722895259.179:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.458386][ T29] audit: type=1326 audit(1722895259.179:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.481594][ T29] audit: type=1326 audit(1722895259.179:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.504819][ T29] audit: type=1326 audit(1722895259.179:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.528194][ T29] audit: type=1326 audit(1722895259.179:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.551408][ T29] audit: type=1326 audit(1722895259.179:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.574696][ T29] audit: type=1326 audit(1722895259.179:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.587802][ T983] kernel write not supported for file /244/net/fib_triestat (pid: 983 comm: kworker/1:2) [ 54.597928][ T29] audit: type=1326 audit(1722895259.179:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54503e79f9 code=0x7ffc0000 [ 54.631009][ T5182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.654805][ T5351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.371'. [ 54.663844][ T5182] Cannot create hsr debugfs directory [ 54.729664][ T5361] loop1: detected capacity change from 0 to 1024 [ 54.765932][ T5363] loop3: detected capacity change from 0 to 1024 [ 54.772364][ T5364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.779582][ T5364] IPv6: NLM_F_CREATE should be set when creating new route [ 54.785588][ T5363] EXT4-fs: Ignoring removed oldalloc option [ 54.786779][ T5364] IPv6: NLM_F_CREATE should be set when creating new route [ 54.795218][ T5363] EXT4-fs: Ignoring removed i_version option [ 54.805875][ T5363] EXT4-fs: Ignoring removed orlov option [ 54.819595][ T5363] EXT4-fs (loop3): stripe (127) is not aligned with cluster size (16), stripe is disabled [ 54.892268][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.918148][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.922125][ T5399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.935494][ T5399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.985197][ T5393] FAULT_INJECTION: forcing a failure. [ 54.985197][ T5393] name failslab, interval 1, probability 0, space 0, times 0 [ 54.997876][ T5393] CPU: 0 UID: 0 PID: 5393 Comm: syz.1.375 Not tainted 6.11.0-rc2-syzkaller #0 [ 55.006724][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 55.016885][ T5393] Call Trace: [ 55.020165][ T5393] [ 55.023089][ T5393] dump_stack_lvl+0xf2/0x150 [ 55.027760][ T5393] dump_stack+0x15/0x20 [ 55.031916][ T5393] should_fail_ex+0x229/0x230 [ 55.036675][ T5393] ? ext4_init_io_end+0x31/0xb0 [ 55.041544][ T5393] should_failslab+0x8f/0xb0 [ 55.046147][ T5393] kmem_cache_alloc_noprof+0x4c/0x290 [ 55.051599][ T5393] ext4_init_io_end+0x31/0xb0 [ 55.056278][ T5393] ext4_do_writepages+0x6c5/0x2110 [ 55.061403][ T5393] ? __sbitmap_queue_get+0x15/0x20 [ 55.066767][ T5393] ? __rcu_read_unlock+0x4e/0x70 [ 55.071715][ T5393] ? xa_load+0xb9/0xe0 [ 55.075842][ T5393] ? memcg_list_lru_alloc+0xd2/0x740 [ 55.081128][ T5393] ? mod_objcg_state+0x2ea/0x4f0 [ 55.086075][ T5393] ? mod_objcg_state+0x2ea/0x4f0 [ 55.091130][ T5393] ext4_writepages+0x159/0x2e0 [ 55.095973][ T5393] ? __pfx_ext4_writepages+0x10/0x10 [ 55.101259][ T5393] do_writepages+0x1d8/0x480 [ 55.105924][ T5393] ? folio_mark_accessed+0x11b/0x360 [ 55.111222][ T5393] ? _raw_spin_unlock+0x26/0x50 [ 55.116104][ T5393] filemap_fdatawrite_wbc+0xdb/0x100 [ 55.121396][ T5393] filemap_flush+0x61/0x90 [ 55.125900][ T5393] ext4_alloc_da_blocks+0x50/0x130 [ 55.131059][ T5393] ext4_ind_migrate+0x125/0x4a0 [ 55.135909][ T5393] ? __ext4_journal_stop+0xff/0x120 [ 55.141159][ T5393] ext4_fileattr_set+0xa52/0xde0 [ 55.146112][ T5393] ? fileattr_fill_flags+0x188/0x1b0 [ 55.151403][ T5393] vfs_fileattr_set+0x59e/0x5f0 [ 55.156261][ T5393] do_vfs_ioctl+0x1267/0x1560 [ 55.160989][ T5393] ? __fget_files+0x1da/0x210 [ 55.165746][ T5393] __se_sys_ioctl+0x81/0x150 [ 55.170336][ T5393] __x64_sys_ioctl+0x43/0x50 [ 55.174933][ T5393] x64_sys_call+0x15cc/0x2d60 [ 55.179609][ T5393] do_syscall_64+0xc9/0x1c0 [ 55.184116][ T5393] ? clear_bhb_loop+0x55/0xb0 [ 55.188890][ T5393] ? clear_bhb_loop+0x55/0xb0 [ 55.193671][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.199707][ T5393] RIP: 0033:0x7f9a83d479f9 [ 55.204170][ T5393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.223776][ T5393] RSP: 002b:00007f9a829c7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.232208][ T5393] RAX: ffffffffffffffda RBX: 00007f9a83ed5f80 RCX: 00007f9a83d479f9 [ 55.240177][ T5393] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 0000000000000007 [ 55.248201][ T5393] RBP: 00007f9a829c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.256268][ T5393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.256280][ T5393] R13: 000000000000000b R14: 00007f9a83ed5f80 R15: 00007ffc53611f08 [ 55.256298][ T5393] [ 55.304023][ T5399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.376'. [ 55.313118][ T5393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 55.347497][ T5452] loop4: detected capacity change from 0 to 764 [ 55.357610][ T5455] loop2: detected capacity change from 0 to 764 [ 55.364114][ T5452] iso9660: Unknown parameter 'ÿÿÿÿ' [ 55.369497][ T5455] iso9660: Unknown parameter 'ÿÿÿÿ' [ 55.380178][ T5182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.400165][ T5182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.417290][ T5182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.425754][ T5182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.469489][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.489162][ T5182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.501921][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.509078][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.524525][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.531663][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.727286][ T5461] loop2: detected capacity change from 0 to 1024 [ 55.824281][ T5461] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.379: attempt to clear invalid blocks 1886221359 len 1 [ 55.909031][ T5467] loop1: detected capacity change from 0 to 1024 [ 55.943890][ T5471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=5471 comm=syz.3.382 [ 55.964820][ T5467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.970686][ T5471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=5471 comm=syz.3.382 [ 56.000827][ T5472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=5472 comm=syz.3.382 [ 56.057291][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.067498][ T5486] loop1: detected capacity change from 0 to 1024 [ 56.083718][ T5494] loop3: detected capacity change from 0 to 128 [ 56.225138][ T5516] tipc: Started in network mode [ 56.230015][ T5516] tipc: Node identity , cluster identity 4711 [ 56.236157][ T5516] tipc: Failed to obtain node identity [ 56.241632][ T5516] tipc: Enabling of bearer rejected, failed to enable media [ 56.257061][ T5515] loop4: detected capacity change from 0 to 2048 [ 56.263843][ T5515] ext2: Unknown parameter 'obj_type' [ 56.287069][ T5522] loop1: detected capacity change from 0 to 256 [ 56.306756][ T5522] vfat: Unknown parameter 'nnonumtail' [ 56.313124][ T5182] veth0_vlan: entered promiscuous mode [ 56.354934][ T5182] veth1_vlan: entered promiscuous mode [ 56.434177][ T5182] veth0_macvtap: entered promiscuous mode [ 56.442274][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.462987][ T5182] veth1_macvtap: entered promiscuous mode [ 56.484196][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.514727][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.525262][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.535255][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.545884][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.555794][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.566275][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.576097][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.586667][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.693014][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.704905][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 56.714631][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.725138][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.735016][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.745562][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.755471][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.765924][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.775816][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.786297][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.797642][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.807677][ T5182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.816496][ T5182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.823367][ T5554] loop1: detected capacity change from 0 to 512 [ 56.825194][ T5182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.840240][ T5182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.873811][ T5554] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.391: casefold flag without casefold feature [ 56.888557][ T5554] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.391: couldn't read orphan inode 15 (err -117) [ 56.938402][ T5570] loop2: detected capacity change from 0 to 764 [ 56.945754][ T5570] iso9660: Unknown parameter 'ÿÿÿÿ' [ 57.035450][ T5554] loop1: detected capacity change from 512 to 64 [ 57.045087][ T5554] syz.1.391: attempt to access beyond end of device [ 57.045087][ T5554] loop1: rw=2051, sector=506, nr_sectors = 2 limit=64 [ 57.059560][ T5554] EXT4-fs (loop1): discard request in group:0 block:252 count:1 failed with -5 [ 57.070546][ T5554] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 57.089791][ T5554] syz.1.391: attempt to access beyond end of device [ 57.089791][ T5554] loop1: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 57.113405][ T5554] EXT4-fs (loop1): discard request in group:0 block:254 count:1 failed with -5 [ 57.123267][ T5554] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 57.164154][ T4815] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 57.180952][ T5576] loop0: detected capacity change from 0 to 2048 [ 57.193246][ T5578] loop4: detected capacity change from 0 to 1024 [ 57.522875][ T5597] loop4: detected capacity change from 0 to 164 [ 57.558800][ T5597] Unable to read rock-ridge attributes [ 57.588408][ T5602] Unable to read rock-ridge attributes [ 57.773939][ T5619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.782537][ T5619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.853619][ T5623] loop2: detected capacity change from 0 to 1024 [ 57.944214][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.952780][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.975667][ T5627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 58.333589][ T5629] syzkaller0: entered promiscuous mode [ 58.339231][ T5629] syzkaller0: entered allmulticast mode [ 58.346557][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 58.346583][ T29] audit: type=1400 audit(1722895263.119:796): avc: denied { relabelfrom } for pid=5628 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.372369][ T29] audit: type=1400 audit(1722895263.119:797): avc: denied { relabelto } for pid=5628 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.405462][ T5633] loop0: detected capacity change from 0 to 512 [ 58.412166][ T5633] EXT4-fs (loop0): first meta block group too large: 4278190080 (group descriptor block count 1) [ 58.427734][ T29] audit: type=1326 audit(1722895263.199:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5632 comm="syz.0.413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a803e79f9 code=0x0 [ 58.523552][ T29] audit: type=1400 audit(1722895263.289:799): avc: denied { mount } for pid=5636 comm="syz.4.415" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.530109][ T5643] loop2: detected capacity change from 0 to 256 [ 58.555148][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.568920][ T5645] loop3: detected capacity change from 0 to 128 [ 58.579178][ T29] audit: type=1400 audit(1722895263.349:800): avc: denied { name_bind } for pid=5644 comm="syz.3.417" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 58.607798][ T3388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.621944][ T5643] ================================================================== [ 58.630030][ T5643] BUG: KCSAN: data-race in fast_dput / lookup_fast [ 58.636582][ T5643] [ 58.638910][ T5643] read-write to 0xffff88810609d0c0 of 4 bytes by task 5649 on cpu 0: [ 58.646970][ T5643] fast_dput+0x29f/0x2c0 [ 58.651219][ T5643] dput+0x24/0xd0 [ 58.654850][ T5643] step_into+0x182/0x810 [ 58.659090][ T5643] handle_dots+0x3ec/0x750 [ 58.663499][ T5643] link_path_walk+0x62c/0x820 [ 58.668174][ T5643] path_lookupat+0x72/0x2b0 [ 58.672666][ T5643] filename_lookup+0x127/0x300 [ 58.677418][ T5643] user_path_at+0x3c/0x110 [ 58.681824][ T5643] __se_sys_mount+0x248/0x2d0 [ 58.686494][ T5643] __x64_sys_mount+0x67/0x80 [ 58.691596][ T5643] x64_sys_call+0x203e/0x2d60 [ 58.696265][ T5643] do_syscall_64+0xc9/0x1c0 [ 58.700759][ T5643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.706640][ T5643] [ 58.708948][ T5643] read to 0xffff88810609d0c0 of 4 bytes by task 5643 on cpu 1: [ 58.716472][ T5643] lookup_fast+0xd9/0x2a0 [ 58.720791][ T5643] link_path_walk+0x464/0x820 [ 58.725453][ T5643] path_lookupat+0x72/0x2b0 [ 58.729949][ T5643] filename_lookup+0x127/0x300 [ 58.734700][ T5643] user_path_at+0x3c/0x110 [ 58.739105][ T5643] __se_sys_mount+0x248/0x2d0 [ 58.743772][ T5643] __x64_sys_mount+0x67/0x80 [ 58.748352][ T5643] x64_sys_call+0x203e/0x2d60 [ 58.753020][ T5643] do_syscall_64+0xc9/0x1c0 [ 58.757519][ T5643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.763403][ T5643] [ 58.765708][ T5643] value changed: 0x00280007 -> 0x00290047 [ 58.771406][ T5643] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 58.773716][ T5643] Reported by Kernel Concurrency Sanitizer on: [ 58.779876][ T5643] CPU: 1 UID: 0 PID: 5643 Comm: syz.2.416 Not tainted 6.11.0-rc2-syzkaller #0 [ 58.788795][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.798834][ T5643] ================================================================== [ 58.820681][ T29] audit: type=1400 audit(1722895263.579:801): avc: denied { write } for pid=3247 comm="syz-executor" path="pipe:[603]" dev="pipefs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 58.925115][ T3388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.008342][ T3388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.077452][ T3388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.090361][ T5653] chnl_net:caif_netlink_parms(): no params data found [ 59.122771][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.129947][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.137631][ T5653] bridge_slave_0: entered allmulticast mode [ 59.143880][ T5653] bridge_slave_0: entered promiscuous mode [ 59.150926][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.158364][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.165831][ T5653] bridge_slave_1: entered allmulticast mode [ 59.172030][ T5653] bridge_slave_1: entered promiscuous mode [ 59.191239][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.202116][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.221217][ T5653] team0: Port device team_slave_0 added [ 59.227756][ T5653] team0: Port device team_slave_1 added [ 59.252990][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.259988][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.285951][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.297591][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.304647][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.330733][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.341685][ T3388] bridge_slave_1: left allmulticast mode [ 59.347363][ T3388] bridge_slave_1: left promiscuous mode [ 59.352994][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.360625][ T3388] bridge_slave_0: left allmulticast mode [ 59.366351][ T3388] bridge_slave_0: left promiscuous mode [ 59.371981][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.456865][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.467665][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.477792][ T3388] bond0 (unregistering): Released all slaves [ 59.502257][ T5653] hsr_slave_0: entered promiscuous mode [ 59.508506][ T5653] hsr_slave_1: entered promiscuous mode [ 59.514449][ T5653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.522081][ T5653] Cannot create hsr debugfs directory [ 59.599223][ T3388] hsr_slave_0: left promiscuous mode [ 59.605135][ T3388] hsr_slave_1: left promiscuous mode [ 59.610863][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.618320][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.627086][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.634498][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.643628][ T3388] veth1_macvtap: left promiscuous mode [ 59.649287][ T3388] veth0_macvtap: left promiscuous mode [ 59.654904][ T3388] veth1_vlan: left promiscuous mode [ 59.660102][ T3388] veth0_vlan: left promiscuous mode [ 59.731386][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 59.741056][ T3388] team0 (unregistering): Port device team_slave_0 removed [ 59.950309][ T5653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.960303][ T5653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.972842][ T5653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.983135][ T5653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.022825][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.055033][ T5653] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.069923][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.077029][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.095783][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.102855][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.120519][ T5653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.155712][ T3388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.192073][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.210297][ T3388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.267274][ T3388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.288638][ T5653] veth0_vlan: entered promiscuous mode [ 60.298736][ T5653] veth1_vlan: entered promiscuous mode [ 60.308088][ T3388] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.330708][ T5653] veth0_macvtap: entered promiscuous mode [ 60.339973][ T5653] veth1_macvtap: entered promiscuous mode [ 60.350468][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.360944][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.370767][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.381277][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.391089][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.401544][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.411456][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.421941][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.432716][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.442988][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.453683][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.463547][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.474162][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.483951][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.494429][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.504340][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.514784][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.525357][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.534734][ T5653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.543568][ T5653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.552358][ T5653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.561160][ T5653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.596722][ T3388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.644857][ T3388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.718156][ T3388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.787395][ T3388] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.865504][ T3388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.875800][ T3388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.927588][ T3388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.937969][ T3388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.008388][ T3388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.018741][ T3388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.087577][ T3388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.097954][ T3388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.174774][ T3388] bridge_slave_1: left allmulticast mode [ 61.180478][ T3388] bridge_slave_1: left promiscuous mode [ 61.186194][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.197191][ T3388] bridge_slave_0: left allmulticast mode [ 61.202878][ T3388] bridge_slave_0: left promiscuous mode [ 61.208802][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.217557][ T3388] bridge_slave_1: left allmulticast mode [ 61.223203][ T3388] bridge_slave_1: left promiscuous mode [ 61.228930][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.237266][ T3388] bridge_slave_0: left allmulticast mode [ 61.242888][ T3388] bridge_slave_0: left promiscuous mode [ 61.248597][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.256813][ T3388] bridge_slave_1: left allmulticast mode [ 61.262434][ T3388] bridge_slave_1: left promiscuous mode [ 61.268098][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.275840][ T3388] bridge_slave_0: left allmulticast mode [ 61.281458][ T3388] bridge_slave_0: left promiscuous mode [ 61.287101][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.628506][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.638745][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.649233][ T3388] bond0 (unregistering): Released all slaves [ 61.658128][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.668698][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.678342][ T3388] bond0 (unregistering): Released all slaves [ 61.687299][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.697397][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.707175][ T3388] bond0 (unregistering): Released all slaves [ 61.948121][ T3388] hsr_slave_0: left promiscuous mode [ 61.953863][ T3388] hsr_slave_1: left promiscuous mode [ 61.962439][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.969941][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.979466][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.986917][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.997726][ T3388] hsr_slave_0: left promiscuous mode [ 62.003643][ T3388] hsr_slave_1: left promiscuous mode [ 62.009870][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.017330][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.025885][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.033379][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.042723][ T3388] hsr_slave_0: left promiscuous mode [ 62.049132][ T3388] hsr_slave_1: left promiscuous mode [ 62.055023][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.062412][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.070304][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.077723][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.088454][ T3388] veth1_macvtap: left promiscuous mode [ 62.093922][ T3388] veth0_macvtap: left promiscuous mode [ 62.099495][ T3388] veth1_vlan: left promiscuous mode [ 62.104774][ T3388] veth0_vlan: left promiscuous mode [ 62.111035][ T3388] veth1_macvtap: left promiscuous mode [ 62.116720][ T3388] veth0_macvtap: left promiscuous mode [ 62.122216][ T3388] veth1_vlan: left promiscuous mode [ 62.127624][ T3388] veth0_vlan: left promiscuous mode [ 62.134139][ T3388] veth1_macvtap: left promiscuous mode [ 62.139629][ T3388] veth0_macvtap: left promiscuous mode [ 62.145151][ T3388] veth1_vlan: left promiscuous mode [ 62.150414][ T3388] veth0_vlan: left promiscuous mode [ 62.296306][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 62.306333][ T3388] team0 (unregistering): Port device team_slave_0 removed [ 62.365362][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 62.375659][ T3388] team0 (unregistering): Port device team_slave_0 removed [ 62.413967][ T3356] smc: removing ib device syz1 [ 62.453225][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 62.475344][ T3388] team0 (unregistering): Port device team_slave_0 removed [ 63.197784][ T3388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.247446][ T3388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.287222][ T3388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.337621][ T3388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.408378][ T3388] bridge_slave_1: left allmulticast mode [ 63.414035][ T3388] bridge_slave_1: left promiscuous mode [ 63.419838][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.428151][ T3388] bridge_slave_0: left allmulticast mode [ 63.433825][ T3388] bridge_slave_0: left promiscuous mode [ 63.439585][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.546632][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.556531][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.566326][ T3388] bond0 (unregistering): Released all slaves [ 63.647807][ T3388] hsr_slave_0: left promiscuous mode [ 63.658355][ T3388] hsr_slave_1: left promiscuous mode [ 63.673800][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.681274][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.689874][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.697369][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.709002][ T3388] veth1_macvtap: left promiscuous mode [ 63.714597][ T3388] veth0_macvtap: left promiscuous mode [ 63.720066][ T3388] veth1_vlan: left promiscuous mode [ 63.725386][ T3388] veth0_vlan: left promiscuous mode [ 63.792542][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 63.802072][ T3388] team0 (unregistering): Port device team_slave_0 removed [ 64.098477][ T3388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.127109][ T3388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.167468][ T3388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.227068][ T3388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.288482][ T3388] bridge_slave_1: left allmulticast mode [ 66.294177][ T3388] bridge_slave_1: left promiscuous mode [ 66.299934][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.307878][ T3388] bridge_slave_0: left allmulticast mode [ 66.313541][ T3388] bridge_slave_0: left promiscuous mode [ 66.319165][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.425939][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.436064][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.445762][ T3388] bond0 (unregistering): Released all slaves [ 66.536312][ T3388] hsr_slave_0: left promiscuous mode [ 66.542080][ T3388] hsr_slave_1: left promiscuous mode [ 66.548091][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.555555][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.563087][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.570535][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.578959][ T3388] veth1_macvtap: left promiscuous mode [ 66.584448][ T3388] veth0_macvtap: left promiscuous mode [ 66.589919][ T3388] veth1_vlan: left promiscuous mode [ 66.595201][ T3388] veth0_vlan: left promiscuous mode [ 66.662276][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 66.671540][ T3388] team0 (unregistering): Port device team_slave_0 removed