last executing test programs: 5.636564902s ago: executing program 1 (id=69): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45}, {0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5a}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x20000000000002f2, &(0x7f0000000440)=[{0x8270, 0x13, 0x0, 0xfffff313}, {0xe, 0x80, 0x1a, 0x7}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000ec0000000068dfe0ded21ab5f6361d5512bc179440df0d3cc2fa789674e9376b0f97234f2cc2dc073e1006f6ec1b91ded4bd5137ba3ce04d78c5a25529425fdca5bf650d83a26d641c5c1e49dd986ca58dce34cfc96267efe7941896eade05502289850393ce2197b80fc5659dfd3c99fbee580481078363517524499d8f2becfd861e119355f343be3449a204eb7f151e5ebf4d2379b7e25cf36d084dcc503f6a09b22a7e6fbf994905b56104d9272d25ea13bf357e4b2e5d606a38087746fd34f87d4987fb68075c8abd9d15fe465f0a3dde24aeeece413fcf2e92c37ced933edd6992fed4eed04f2c29fff6b1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = epoll_create(0x0) epoll_wait(r8, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x2) close_range(r6, r8, 0x2) fcntl$notify(r10, 0x402, 0x8000002d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x3}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) write$binfmt_script(r6, &(0x7f00000002c0), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) 4.768362122s ago: executing program 1 (id=87): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "3adeaa2e1144a49890afdd8fceba8515b32a6a8e92217b399b64b877220d35ad6f65e6ae024883c600061c6c6c4394737d69f9d64f264453f9"}, 0x44) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r1, 0x0, &(0x7f0000000040)) 4.721740167s ago: executing program 1 (id=88): set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r0, 0x0, 0x0) write$selinux_create(r0, 0x0, 0x0) 4.632621893s ago: executing program 1 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) unshare(0x22020600) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 4.324580289s ago: executing program 1 (id=96): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x5, 0x0, &(0x7f0000000300)=0xc) r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x28, 0x1, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&\t0\t\t\t') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) eventfd2(0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.886779354s ago: executing program 4 (id=103): socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioperm(0x0, 0x4, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00', @ANYBLOB="e1b10a4a100bd8cadfa5000000000501312070eb77000500130005000000b633e164bb824f63400b516b92e77cf15581883bd444efcffcfd428112c024c92f4b1ea1d9ad79b1af640db517d2bed14bd0f55354ef387fee50fc8413105397f0e49a6b5f66f2ab4a690364fb9aae62fa60bf02bd90e2c6d8c8256ff5e62f66f47be86e22c9d673eaee0245dc391470bb1607490def115eb04d2cbfce403ee8a00520428c11137a116de21cb8410e11ec81309cebb2d00c5c54273c502966fa5e958ad4c87d22a9abd16ce22b280fc0a03e49b04bed67fd3c89a1dd209ddcd4070ebb2e95e4c4382d8978"], 0x24}, 0x1, 0x0, 0x0, 0x4008084}, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) unshare(0x28000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x9901, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000028c0)={{r1, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x20, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0xffffffffffffffff, 0x2000000000000, 0xffffffffffffffff, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4808, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002ac0)={r2, 0x0, &(0x7f00000029c0)=""/199}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208002900000004", 0x2f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300000000000aa1180015000600142603600e1208000f", 0x2b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef80"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) 3.165316163s ago: executing program 4 (id=115): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x210, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_MARK={0x10}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_DIVISOR={0x8}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x180, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x94, 0x0, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x210}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.035979894s ago: executing program 4 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000000001000e000000000000000000000a20000000000a0300000100000000000007000000ff"], 0x8c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x9}) 2.854185628s ago: executing program 1 (id=126): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x40}}, 0x0) 2.205229681s ago: executing program 2 (id=135): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0), 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xda079decc3338a04, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x0, 0x4000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@ifindex, r5, 0x11, 0x0, 0x0, @link_id}, 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x288, 0xffffffff, 0x158, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$inet6(0xa, 0x0, 0x88) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x128}}, 0x0) 2.172388774s ago: executing program 4 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1a49002, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000040)='./file0/file0\x00', 0x400, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmode={'dmode', 0x3d, 0x3}}, {}, {@map_normal}, {@unhide}, {@overriderock}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@nojoliet}, {@nocompress}, {@uid}, {@session={'session', 0x3d, 0x43}}, {@hide}]}, 0x1, 0x40e, &(0x7f0000000a80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x189505a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 2.09259959s ago: executing program 4 (id=137): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0xb) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) 1.528797786s ago: executing program 4 (id=145): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000016c0)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x4}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000001440)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="f83c8e6a502e297a87fe2f5047133af8873b946a76166a83ed1600637ae36accac9b957e316f29525bc218bf4450a0a8b7399578a2e024b0986d88ea596f8dbaa6412e8386ce84a51cce6ed4e0af487a0854c1ef98737fba42febc2ed84617fe2d15c30899c5", @ANYBLOB="15484a63e5348a6ba114beb16a9c49bc008d9685e0be0179786cb3a76f9cdc0e64034a74f8ddb3ec567b6d765de53ee33004cdf1dbb27b4d130e261139325af394685497c6bd2723df99d52df2c96e5dee390d222f360a321f3d033043d9f16216d16cba7c4a7cbdf8fec423ac3503a94f2a811fce1986b50a03c404ffbe94a6dc4c41a465b878958883a0bdc3ad8f75f3df57"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffe}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000001000008500000095000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x80}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}}], 0x2, 0x0) 1.416524376s ago: executing program 3 (id=148): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) 1.415998015s ago: executing program 3 (id=149): creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_abort}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noinit_itable}, {@orlov}, {@bsdgroups}, {@abort}, {@user_xattr}, {@quota}, {@data_err_ignore}]}, 0x4, 0x54f, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xf) 1.332804572s ago: executing program 3 (id=150): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f00000000c0)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 1.288663305s ago: executing program 3 (id=151): r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x7058, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r4) 1.264765148s ago: executing program 2 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0xfdef) 1.130245148s ago: executing program 2 (id=153): syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00'], 0x1, 0x654, &(0x7f0000000740)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 987.26323ms ago: executing program 2 (id=154): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x80}, @result}], 0x1c) 986.74465ms ago: executing program 2 (id=155): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_clone(0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', r4}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000308030000000000000000000000000006000240000000000c00048008000240000000587000"], 0x30}}, 0x0) openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x0) getpid() 405.623367ms ago: executing program 0 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 378.01256ms ago: executing program 3 (id=164): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x3, 0x362, [], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000076657468315f746f5f62726964676500627269646765300000000000000000006261746164765f736c6176655f300000626f6e645f736c6176655f3100000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000006e000000ce000000fe000000726564697265637400000000000000000000000000000000000000000000000008000000000000000000000000000000434f4e4e5345434d41524b000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000076657468315f746f5f7465616d0000006e7230000000000000000000000000006970366772657461703000000000000076657468315f6d616376746170000000aaaaaaaaaaaa000000000000ffffffffffff0000000000006e000000be000000ee00000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000001000000000000000000000000006970766c616e31000000000000000000697036"]}, 0x311) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000200)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x46, 0x0) 377.39069ms ago: executing program 0 (id=165): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf0e87ae9f643bdc}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5001000010001307feffffff0000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r3, @ANYBLOB="01fcff000000000000000c00000018000380140003808dff01800400030000"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000001380)=""/151, 0x97}], 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "076a1400"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) inotify_init1(0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f00000001c0)) syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_pts(r4, 0x42) r7 = dup3(r6, r4, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 251.68972ms ago: executing program 3 (id=166): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) creat(&(0x7f0000000480)='./control\x00', 0x8) r1 = inotify_init() read(r1, &(0x7f0000000c80)=""/169, 0xa9) r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./control\x00', 0xa2000396) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) uname(&(0x7f0000000240)=""/57) inotify_rm_watch(r1, r2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x1005, 0x0) recvmsg$unix(r4, &(0x7f0000000200)={&(0x7f00000003c0), 0x6e, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000980)=""/240, 0xf0}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/89, 0x59}, {0x0}], 0x5}, 0x10060) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9}, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r6}, 0x10) unlink(&(0x7f0000000080)='./cgroup\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0xe2f808ccd78d692}]}}}]}, 0x38}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0), 0x0, 0x0) r8 = semget$private(0x0, 0x2, 0x100) semop(r8, &(0x7f00000002c0)=[{0x0, 0x3, 0x1800}, {0x1, 0x8000, 0x1000}, {0x0, 0x9, 0x800}, {0x1, 0x200}, {0x0, 0x9}], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 232.743371ms ago: executing program 0 (id=167): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x14, &(0x7f00000000c0)={&(0x7f0000000180)="9fdcaad0f0d4e8e33069e76d78f8ed05000000000000000fb4d1b32e36", 0x1d}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 188.043035ms ago: executing program 0 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r0, 0x29, 0x43, 0x0, 0x0) 163.467327ms ago: executing program 0 (id=169): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000140)=0x6, 0x4) listen(r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) timerfd_create(0x9, 0x800) syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0x3cc}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/231, 0xe7}, {&(0x7f0000000740)=""/204, 0xcc}], 0x4, &(0x7f0000000440)}, 0x1}], 0x1, 0x40000002, &(0x7f0000000880)={0x77359400}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r8}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) setfsgid(0xee00) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000119fbd02fe000000000000000800140000000000"], 0x18}}, 0x0) io_uring_enter(r2, 0x6256, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 71.550435ms ago: executing program 2 (id=170): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="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", 0x6c2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001600)="9a", 0x1}], 0x1}}], 0x2, 0x44080) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x87, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000c20000000902"], 0x0, 0x96}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000930c00009a0300000000000000640000ef4713a62d005ff4"], &(0x7f0000000040)=""/247, 0x27, 0xf7, 0x1}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd49, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x66}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x136a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfff, r6, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getdents64(r6, &(0x7f0000001fc0)=""/4086, 0xff6) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x32}}, 0x18}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000140)=""/144, &(0x7f0000000040)=0x90) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r9 = socket(0x18, 0x0, 0x0) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) sendfile(r9, r8, 0x0, 0x8) 0s ago: executing program 0 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.403936][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.403952][ T29] audit: type=1400 audit(1722791664.048:76): avc: denied { transition } for pid=3140 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.408040][ T29] audit: type=1400 audit(1722791664.048:77): avc: denied { noatsecure } for pid=3140 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.410743][ T29] audit: type=1400 audit(1722791664.048:78): avc: denied { write } for pid=3140 comm="sh" path="pipe:[1602]" dev="pipefs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.413908][ T29] audit: type=1400 audit(1722791664.048:79): avc: denied { rlimitinh } for pid=3140 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.416657][ T29] audit: type=1400 audit(1722791664.048:80): avc: denied { siginh } for pid=3140 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.076077][ T3141] sshd (3141) used greatest stack depth: 11536 bytes left [ 20.374206][ T29] audit: type=1400 audit(1722791665.018:81): avc: denied { read } for pid=2944 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 27.590844][ T29] audit: type=1400 audit(1722791672.238:82): avc: denied { mounton } for pid=3250 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.592008][ T3250] cgroup: Unknown subsys name 'net' [ 27.613662][ T29] audit: type=1400 audit(1722791672.238:83): avc: denied { mount } for pid=3250 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.641022][ T29] audit: type=1400 audit(1722791672.268:84): avc: denied { unmount } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.778948][ T3250] cgroup: Unknown subsys name 'rlimit' [ 27.871944][ T29] audit: type=1400 audit(1722791672.518:85): avc: denied { setattr } for pid=3250 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.896304][ T29] audit: type=1400 audit(1722791672.518:86): avc: denied { create } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.916812][ T29] audit: type=1400 audit(1722791672.518:87): avc: denied { write } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.937164][ T29] audit: type=1400 audit(1722791672.518:88): avc: denied { read } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.955212][ T3252] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.957418][ T29] audit: type=1400 audit(1722791672.528:89): avc: denied { mounton } for pid=3250 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.978900][ T3250] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.990690][ T29] audit: type=1400 audit(1722791672.528:90): avc: denied { mount } for pid=3250 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.022667][ T29] audit: type=1400 audit(1722791672.608:91): avc: denied { relabelto } for pid=3252 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.683773][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 29.739898][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 29.761763][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.768876][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.776021][ T3265] bridge_slave_0: entered allmulticast mode [ 29.782504][ T3265] bridge_slave_0: entered promiscuous mode [ 29.793331][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 29.806231][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.813398][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.820589][ T3265] bridge_slave_1: entered allmulticast mode [ 29.827094][ T3265] bridge_slave_1: entered promiscuous mode [ 29.875744][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.894892][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.902001][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.909241][ T3260] bridge_slave_0: entered allmulticast mode [ 29.915564][ T3260] bridge_slave_0: entered promiscuous mode [ 29.922079][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 29.933439][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.947555][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.954721][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.962061][ T3260] bridge_slave_1: entered allmulticast mode [ 29.968440][ T3260] bridge_slave_1: entered promiscuous mode [ 30.008863][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.018521][ T3265] team0: Port device team_slave_0 added [ 30.029474][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.036582][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.043738][ T3259] bridge_slave_0: entered allmulticast mode [ 30.050239][ T3259] bridge_slave_0: entered promiscuous mode [ 30.061414][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 30.071189][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.080828][ T3265] team0: Port device team_slave_1 added [ 30.086587][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.093703][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.100944][ T3259] bridge_slave_1: entered allmulticast mode [ 30.107565][ T3259] bridge_slave_1: entered promiscuous mode [ 30.147178][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.163998][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.171001][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.197023][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.214094][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.238306][ T3260] team0: Port device team_slave_0 added [ 30.244253][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.251291][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.277316][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.299798][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.306931][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.314169][ T3262] bridge_slave_0: entered allmulticast mode [ 30.320501][ T3262] bridge_slave_0: entered promiscuous mode [ 30.327651][ T3260] team0: Port device team_slave_1 added [ 30.333334][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.340447][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.347677][ T3262] bridge_slave_1: entered allmulticast mode [ 30.353926][ T3262] bridge_slave_1: entered promiscuous mode [ 30.369496][ T3259] team0: Port device team_slave_0 added [ 30.396522][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.407162][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.417204][ T3259] team0: Port device team_slave_1 added [ 30.427877][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.434861][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.460896][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.472667][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.479663][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.505632][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.544888][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.552109][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.559360][ T3267] bridge_slave_0: entered allmulticast mode [ 30.565683][ T3267] bridge_slave_0: entered promiscuous mode [ 30.574523][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.581624][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.588784][ T3267] bridge_slave_1: entered allmulticast mode [ 30.595104][ T3267] bridge_slave_1: entered promiscuous mode [ 30.602964][ T3265] hsr_slave_0: entered promiscuous mode [ 30.609361][ T3265] hsr_slave_1: entered promiscuous mode [ 30.616219][ T3262] team0: Port device team_slave_0 added [ 30.622083][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.629063][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.655017][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.666230][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.673210][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.699241][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.730429][ T3262] team0: Port device team_slave_1 added [ 30.737276][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.747688][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.803063][ T3260] hsr_slave_0: entered promiscuous mode [ 30.809003][ T3260] hsr_slave_1: entered promiscuous mode [ 30.814772][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.822337][ T3260] Cannot create hsr debugfs directory [ 30.833218][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.840385][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.866319][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.877661][ T3267] team0: Port device team_slave_0 added [ 30.883579][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.890551][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.916547][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.929591][ T3259] hsr_slave_0: entered promiscuous mode [ 30.935720][ T3259] hsr_slave_1: entered promiscuous mode [ 30.941674][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.949254][ T3259] Cannot create hsr debugfs directory [ 30.963973][ T3267] team0: Port device team_slave_1 added [ 30.994380][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.001401][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.027398][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.046596][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.053595][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.079687][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.121215][ T3262] hsr_slave_0: entered promiscuous mode [ 31.127493][ T3262] hsr_slave_1: entered promiscuous mode [ 31.133282][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.140887][ T3262] Cannot create hsr debugfs directory [ 31.176587][ T3267] hsr_slave_0: entered promiscuous mode [ 31.182621][ T3267] hsr_slave_1: entered promiscuous mode [ 31.188610][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.196158][ T3267] Cannot create hsr debugfs directory [ 31.321205][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.332364][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.348764][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.359648][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.379364][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.389969][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.398642][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.407166][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.438727][ T3262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.450007][ T3262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.459452][ T3262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.468355][ T3262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.501856][ T3267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.524166][ T3267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.532850][ T3267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.543691][ T3267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.566421][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.593470][ T3259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.609123][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.621262][ T3259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.630124][ T3259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.639558][ T3259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.666158][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.673343][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.682531][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.689697][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.701592][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.717153][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.757153][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.765404][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.781426][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.792124][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.804986][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.812091][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.820915][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.827974][ T3329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.847950][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.855095][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.863818][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.870897][ T3329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.883172][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.890220][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.917700][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.924815][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.945442][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.970511][ T3267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.980944][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.004524][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.021380][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.040087][ T3262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.050561][ T3262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.073119][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.080241][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.089224][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.096302][ T3329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.117183][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.134598][ T3259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.145066][ T3259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.177549][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.204896][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.258694][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.300868][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.343465][ T3260] veth0_vlan: entered promiscuous mode [ 32.364633][ T3267] veth0_vlan: entered promiscuous mode [ 32.384739][ T3260] veth1_vlan: entered promiscuous mode [ 32.392820][ T3267] veth1_vlan: entered promiscuous mode [ 32.402444][ T3265] veth0_vlan: entered promiscuous mode [ 32.424597][ T3260] veth0_macvtap: entered promiscuous mode [ 32.433344][ T3260] veth1_macvtap: entered promiscuous mode [ 32.447949][ T3265] veth1_vlan: entered promiscuous mode [ 32.457601][ T3267] veth0_macvtap: entered promiscuous mode [ 32.473582][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.486918][ T3267] veth1_macvtap: entered promiscuous mode [ 32.495786][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.514255][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523349][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.532198][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.541012][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.569313][ T3265] veth0_macvtap: entered promiscuous mode [ 32.582749][ T3265] veth1_macvtap: entered promiscuous mode [ 32.590371][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.600863][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.612894][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.627635][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.627651][ T29] audit: type=1400 audit(1722791677.278:110): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/root/syzkaller.rHgsMt/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.629053][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.633792][ T29] audit: type=1400 audit(1722791677.278:111): avc: denied { mount } for pid=3260 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.658212][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.668496][ T29] audit: type=1400 audit(1722791677.278:112): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/root/syzkaller.rHgsMt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.690720][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.700479][ T29] audit: type=1400 audit(1722791677.278:113): avc: denied { mount } for pid=3260 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.700529][ T29] audit: type=1400 audit(1722791677.278:114): avc: denied { unmount } for pid=3260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.778125][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.788984][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.796379][ T29] audit: type=1400 audit(1722791677.438:115): avc: denied { mounton } for pid=3260 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.801981][ T3259] veth0_vlan: entered promiscuous mode [ 32.833914][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.844461][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.856099][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.864415][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.874980][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.884828][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.895286][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.905998][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.914630][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.923470][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.932293][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.937348][ T29] audit: type=1400 audit(1722791677.588:116): avc: denied { read write } for pid=3260 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.941051][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.965129][ T29] audit: type=1400 audit(1722791677.588:117): avc: denied { open } for pid=3260 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.965172][ T29] audit: type=1400 audit(1722791677.588:118): avc: denied { ioctl } for pid=3260 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.030217][ T3262] veth0_vlan: entered promiscuous mode [ 33.038382][ T3262] veth1_vlan: entered promiscuous mode [ 33.052322][ T3262] veth0_macvtap: entered promiscuous mode [ 33.059841][ T3262] veth1_macvtap: entered promiscuous mode [ 33.070015][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.080581][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.090506][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.100961][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.110926][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.121439][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.132102][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.150876][ T3259] veth1_vlan: entered promiscuous mode [ 33.168180][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.178760][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.188606][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.199043][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.208900][ T3262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.219336][ T3262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.231363][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.263349][ T29] audit: type=1400 audit(1722791677.898:119): avc: denied { prog_load } for pid=3399 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.325875][ T3267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.334703][ T3267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.343443][ T3267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.352280][ T3267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.376399][ T3259] veth0_macvtap: entered promiscuous mode [ 33.384764][ T3259] veth1_macvtap: entered promiscuous mode [ 33.402339][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.412926][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.422823][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.433270][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.443081][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.453567][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.463386][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.473812][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.488842][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.529609][ T3262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.538384][ T3262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.547128][ T3262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.555939][ T3262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.572021][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.582635][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.592676][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.603256][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.613182][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.623652][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.633576][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.644059][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.656999][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.665599][ T3259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.674410][ T3259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.683196][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.691911][ T3259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.810571][ T3411] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 33.892981][ T3422] loop1: detected capacity change from 0 to 512 [ 33.905313][ T3422] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.918421][ T3422] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.939265][ T3425] capability: warning: `syz.2.8' uses deprecated v2 capabilities in a way that may be insecure [ 33.955425][ T3422] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.991490][ T3422] EXT4-fs (loop1): 1 truncate cleaned up [ 33.991879][ T3413] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.998308][ T3422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.086545][ T3435] Zero length message leads to an empty skb [ 34.263457][ T3422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9'. [ 34.450791][ T3449] loop3: detected capacity change from 0 to 512 [ 34.460725][ T3449] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 34.471141][ T3449] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 34.480220][ T3449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.495408][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.497791][ T3453] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.511133][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.532606][ T3453] loop2: detected capacity change from 0 to 512 [ 34.541492][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.547331][ T3453] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 34.560462][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.581774][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.596038][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.609953][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.624066][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.638641][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.652762][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.665839][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.711594][ T3459] loop2: detected capacity change from 0 to 512 [ 34.720534][ T3459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 34.730019][ T3459] System zones: 1-12 [ 34.734209][ T3459] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.20: Directory hole found for htree index block 0 [ 34.741597][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.751661][ T3459] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 34.767609][ T3459] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.20: Directory hole found for htree index block 0 [ 34.771237][ T3464] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.792112][ T3459] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 34.803863][ T3464] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.817112][ T3459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.831191][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.846337][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.857454][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.903212][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.913578][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.929470][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 34.947615][ T3470] loop2: detected capacity change from 0 to 256 [ 34.970749][ T3470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 34.981475][ T3449] EXT4-fs error (device loop3): ext4_map_blocks:609: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 34.996493][ T3449] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 35.034690][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.244248][ T3480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27'. [ 35.362625][ T3486] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.377531][ T3486] netlink: 1 bytes leftover after parsing attributes in process `syz.3.25'. [ 35.439094][ T3496] loop0: detected capacity change from 0 to 1024 [ 35.449544][ T3496] ======================================================= [ 35.449544][ T3496] WARNING: The mand mount option has been deprecated and [ 35.449544][ T3496] and is ignored by this kernel. Remove the mand [ 35.449544][ T3496] option from the mount to silence this warning. [ 35.449544][ T3496] ======================================================= [ 35.483536][ T3498] loop1: detected capacity change from 0 to 2048 [ 35.512125][ T3498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.512702][ T3496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.526671][ T3501] devtmpfs: Unknown parameter 'rt' [ 35.546896][ T3496] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.649626][ T3511] netlink: 27 bytes leftover after parsing attributes in process `syz.3.37'. [ 35.683534][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 36.002934][ T3519] team0: Port device team_slave_0 removed [ 36.048267][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.081430][ T3534] loop3: detected capacity change from 0 to 512 [ 36.090004][ T3534] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 36.101724][ T3534] EXT4-fs (loop3): invalid journal inode [ 36.107636][ T3534] EXT4-fs (loop3): can't get journal size [ 36.124290][ T3534] EXT4-fs (loop3): 1 truncate cleaned up [ 36.131966][ T3534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.259132][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.361294][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.374336][ T3568] netlink: 68 bytes leftover after parsing attributes in process `syz.3.51'. [ 36.617895][ T3336] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 36.625635][ T3336] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 36.670781][ T3580] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 36.679543][ T3336] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 36.690901][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 36.699697][ T3582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.53'. [ 36.717501][ T3582] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 36.767396][ T3336] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 36.876163][ T3587] loop2: detected capacity change from 0 to 512 [ 36.883208][ T3587] EXT4-fs: Ignoring removed bh option [ 36.890058][ T3587] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.55: invalid block [ 36.904336][ T3587] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.55: couldn't read orphan inode 15 (err -117) [ 36.916868][ T3587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.935054][ T3587] ref_ctr going negative. vaddr: 0x20002082, curr val: -11067, delta: 1 [ 36.943433][ T3587] ref_ctr increment failed for inode: 0x12 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a18ef40 [ 36.958898][ T3587] syz.2.55 (3587) used greatest stack depth: 11152 bytes left [ 36.980072][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.150297][ T3599] loop4: detected capacity change from 0 to 8192 [ 37.194904][ T3599] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.398030][ T3607] loop2: detected capacity change from 0 to 512 [ 37.406918][ T3607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.429961][ T3607] EXT4-fs (loop2): 1 truncate cleaned up [ 37.436075][ T3607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.454756][ T3607] netlink: 44 bytes leftover after parsing attributes in process `syz.2.60'. [ 37.532406][ T3618] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 37.557859][ T3618] syz.3.65 (3618) used greatest stack depth: 10936 bytes left [ 37.615325][ T3629] loop4: detected capacity change from 0 to 8192 [ 37.652559][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 37.652576][ T29] audit: type=1400 audit(2000000001.960:277): avc: denied { read } for pid=3630 comm="syz.3.71" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.717890][ T29] audit: type=1400 audit(2000000001.960:278): avc: denied { open } for pid=3630 comm="syz.3.71" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.741809][ T29] audit: type=1400 audit(2000000001.960:279): avc: denied { ioctl } for pid=3630 comm="syz.3.71" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x452f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.767274][ T29] audit: type=1400 audit(2000000002.020:280): avc: denied { name_bind } for pid=3639 comm="syz.3.72" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.060594][ T29] audit: type=1400 audit(2000000002.370:281): avc: denied { connect } for pid=3646 comm="syz.0.75" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.118139][ T29] audit: type=1400 audit(2000000002.410:282): avc: denied { ioctl } for pid=3665 comm="syz.3.81" path="socket:[4378]" dev="sockfs" ino=4378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.157286][ T3654] netlink: 'syz.0.75': attribute type 15 has an invalid length. [ 38.238178][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.509632][ T29] audit: type=1400 audit(2000000002.820:283): avc: denied { bind } for pid=3680 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.509663][ T3681] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 38.643427][ T29] audit: type=1400 audit(2000000002.950:284): avc: denied { unmount } for pid=3690 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.777031][ T29] audit: type=1400 audit(2000000003.080:285): avc: denied { listen } for pid=3695 comm="syz.0.92" lport=52386 faddr=fc00:: fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.799795][ T29] audit: type=1400 audit(2000000003.080:286): avc: denied { accept } for pid=3695 comm="syz.0.92" lport=52386 faddr=fc00:: fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.000595][ T3712] loop0: detected capacity change from 0 to 512 [ 39.022894][ T3712] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.98: bad orphan inode 13 [ 39.040577][ T3712] ext4_test_bit(bit=12, block=4) = 1 [ 39.045926][ T3712] is_bad_inode(inode)=0 [ 39.050133][ T3712] NEXT_ORPHAN(inode)=0 [ 39.054349][ T3712] max_ino=32 [ 39.057567][ T3712] i_nlink=1 [ 39.068957][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.089703][ T3715] loop3: detected capacity change from 0 to 512 [ 39.117947][ T3715] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 39.125879][ T3715] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 39.140701][ T3712] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.98: Unrecognised inode hash code 20 [ 39.152020][ T3712] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.98: Corrupt directory, running e2fsck is recommended [ 39.176384][ T3715] System zones: 0-2, 18-18, 34-35 [ 39.183137][ T3715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.209947][ T3712] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.98: Unrecognised inode hash code 20 [ 39.221230][ T3712] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.98: Corrupt directory, running e2fsck is recommended [ 39.254989][ T3715] EXT4-fs (loop3): shut down requested (0) [ 39.272689][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.286223][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.338095][ T3723] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3723 comm=syz.4.103 [ 39.404428][ T3732] loop3: detected capacity change from 0 to 512 [ 39.458598][ T3732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.492661][ T3732] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.516988][ C0] hrtimer: interrupt took 37773 ns [ 39.571204][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.603246][ T3742] loop2: detected capacity change from 0 to 512 [ 39.617936][ T3742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.629753][ T3741] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 39.648892][ T3742] EXT4-fs (loop2): 1 orphan inode deleted [ 39.654678][ T3742] EXT4-fs (loop2): 1 truncate cleaned up [ 39.677376][ T3742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.767262][ T3742] EXT4-fs error (device loop2): ext4_nfs_get_inode:1537: inode #16: comm syz.2.110: iget: bad extra_isize 46 (inode size 256) [ 39.812493][ T3742] EXT4-fs (loop2): Remounting filesystem read-only [ 39.833185][ T3751] loop3: detected capacity change from 0 to 512 [ 39.859550][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.881134][ T3751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.912019][ T3751] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.001095][ T3751] syz.3.113 (3751) used greatest stack depth: 10608 bytes left [ 40.054836][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.211257][ T3776] loop0: detected capacity change from 0 to 512 [ 40.219860][ T3777] loop3: detected capacity change from 0 to 256 [ 40.231372][ T3776] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 40.251866][ T3776] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.123: iget: bad i_size value: -67835469387268086 [ 40.276878][ T3776] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.123: couldn't read orphan inode 15 (err -117) [ 40.292834][ T3776] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.318250][ T3776] ext2 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.335988][ T3364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.338676][ T3776] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 40.365290][ T3265] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 40.471277][ T3364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.512098][ T3364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.556502][ T3797] rose0: refused to change device tx_queue_len [ 40.568442][ T3364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.590603][ T3784] chnl_net:caif_netlink_parms(): no params data found [ 40.625323][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.632457][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.639741][ T3784] bridge_slave_0: entered allmulticast mode [ 40.646219][ T3784] bridge_slave_0: entered promiscuous mode [ 40.653202][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.660323][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.667618][ T3784] bridge_slave_1: entered allmulticast mode [ 40.674001][ T3784] bridge_slave_1: entered promiscuous mode [ 40.691932][ T3784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.720941][ T3784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.746325][ T3364] bridge_slave_1: left allmulticast mode [ 40.752086][ T3364] bridge_slave_1: left promiscuous mode [ 40.757871][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.766152][ T3364] bridge_slave_0: left allmulticast mode [ 40.771842][ T3364] bridge_slave_0: left promiscuous mode [ 40.777596][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.880372][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.890918][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.901524][ T3364] bond0 (unregistering): Released all slaves [ 40.919041][ T3784] team0: Port device team_slave_0 added [ 40.928865][ T3784] team0: Port device team_slave_1 added [ 40.961491][ T3784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.968648][ T3784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.994719][ T3784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.008702][ T3784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.015671][ T3784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.031895][ T3815] loop4: detected capacity change from 0 to 136 [ 41.041576][ T3784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.092274][ T3784] hsr_slave_0: entered promiscuous mode [ 41.099072][ T3784] hsr_slave_1: entered promiscuous mode [ 41.099449][ T3262] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 41.112802][ T3262] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 41.114413][ T3784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.128334][ T3784] Cannot create hsr debugfs directory [ 41.136113][ T3364] hsr_slave_0: left promiscuous mode [ 41.143491][ T3824] ipt_REJECT: TCP_RESET invalid for non-tcp [ 41.149544][ T3364] hsr_slave_1: left promiscuous mode [ 41.155736][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.163254][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.170794][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.178234][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.187512][ T3364] veth1_macvtap: left promiscuous mode [ 41.193064][ T3364] veth0_macvtap: left promiscuous mode [ 41.198984][ T3364] veth1_vlan: left promiscuous mode [ 41.204288][ T3364] veth0_vlan: left promiscuous mode [ 41.274824][ T3828] __nla_validate_parse: 5 callbacks suppressed [ 41.274841][ T3828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 41.309892][ T3364] team0 (unregistering): Port device team_slave_1 removed [ 41.320684][ T3364] team0 (unregistering): Port device team_slave_0 removed [ 41.419835][ T3836] loop3: detected capacity change from 0 to 764 [ 41.448741][ T3836] rock: directory entry would overflow storage [ 41.454990][ T3836] rock: sig=0x4f50, size=4, remaining=3 [ 41.460686][ T3836] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 41.508758][ T3849] loop3: detected capacity change from 0 to 512 [ 41.524305][ T3849] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.142: casefold flag without casefold feature [ 41.538535][ T3849] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.142: couldn't read orphan inode 15 (err -117) [ 41.550760][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.576769][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.636689][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 41.676230][ T3869] loop3: detected capacity change from 0 to 512 [ 41.685935][ T3869] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 41.720849][ T3869] EXT4-fs (loop3): invalid journal inode [ 41.752260][ T1623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.787338][ T3883] loop3: detected capacity change from 0 to 1024 [ 41.794089][ T3883] EXT4-fs: Ignoring removed orlov option [ 41.815256][ T3883] /dev/loop3: Can't open blockdev [ 41.823760][ T3784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.853171][ T3784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.881243][ T1623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.910869][ T3784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.931037][ T3784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.950533][ T1623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.962450][ T3901] syz.2.152 uses obsolete (PF_INET,SOCK_PACKET) [ 41.981916][ T3901] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 42.030069][ T1623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.079598][ T3784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.088764][ T3918] loop2: detected capacity change from 0 to 764 [ 42.110358][ T3784] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.129442][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.136525][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.146160][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.153326][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.251093][ T1623] bridge_slave_1: left allmulticast mode [ 42.256887][ T1623] bridge_slave_1: left promiscuous mode [ 42.262610][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.271447][ T3936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 42.271524][ T1623] bridge_slave_0: left allmulticast mode [ 42.286276][ T1623] bridge_slave_0: left promiscuous mode [ 42.292506][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.432430][ T3946] loop0: detected capacity change from 0 to 512 [ 42.443116][ T3946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.160: bg 0: block 35: padding at end of block bitmap is not set [ 42.458108][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.458730][ T3946] EXT4-fs (loop0): Remounting filesystem read-only [ 42.473363][ T3946] EXT4-fs (loop0): 1 truncate cleaned up [ 42.479480][ T3946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.491581][ T3946] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 42.491830][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.498962][ T3946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.520546][ T1623] bond0 (unregistering): Released all slaves [ 42.533668][ T3946] loop0: detected capacity change from 0 to 1024 [ 42.541040][ T3946] EXT4-fs: Ignoring removed oldalloc option [ 42.563175][ T3946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.581346][ T3879] chnl_net:caif_netlink_parms(): no params data found [ 42.621473][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.660499][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 42.660518][ T29] audit: type=1400 audit(2000000006.970:348): avc: denied { write } for pid=3959 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.672637][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.693788][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.697257][ T3960] netlink: 88 bytes leftover after parsing attributes in process `syz.0.161'. [ 42.701425][ T3879] bridge_slave_0: entered allmulticast mode [ 42.716614][ T3879] bridge_slave_0: entered promiscuous mode [ 42.724349][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.731551][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.740373][ T3879] bridge_slave_1: entered allmulticast mode [ 42.746901][ T3879] bridge_slave_1: entered promiscuous mode [ 42.784723][ T3879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.809133][ T1623] hsr_slave_0: left promiscuous mode [ 42.827093][ T1623] hsr_slave_1: left promiscuous mode [ 42.833768][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.841397][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.851161][ T29] audit: type=1400 audit(2000000007.160:349): avc: denied { setopt } for pid=3974 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.871908][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.879436][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.884271][ T29] audit: type=1400 audit(2000000007.160:350): avc: denied { read } for pid=3974 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.908921][ T1623] veth1_macvtap: left promiscuous mode [ 42.914542][ T1623] veth0_macvtap: left promiscuous mode [ 42.920214][ T1623] veth1_vlan: left promiscuous mode [ 42.925476][ T1623] veth0_vlan: left promiscuous mode [ 42.955314][ T29] audit: type=1400 audit(2000000007.260:351): avc: denied { watch watch_reads } for pid=3980 comm="syz.3.166" path="/49/control" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.034220][ T29] audit: type=1400 audit(2000000007.340:352): avc: denied { listen } for pid=3991 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.054958][ T1623] team0 (unregistering): Port device team_slave_1 removed [ 43.065736][ T1623] team0 (unregistering): Port device team_slave_0 removed [ 43.081867][ T29] audit: type=1400 audit(2000000007.390:353): avc: denied { watch_reads } for pid=3993 comm="syz.2.170" path="/proc/92" dev="proc" ino=5658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 43.128869][ T29] audit: type=1400 audit(2000000007.430:354): avc: denied { read } for pid=3991 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.148052][ T29] audit: type=1400 audit(2000000007.440:355): avc: denied { shutdown } for pid=3991 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.176390][ T29] audit: type=1400 audit(2000000007.480:356): avc: denied { connect } for pid=3993 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.196189][ T29] audit: type=1400 audit(2000000007.480:357): avc: denied { write } for pid=3993 comm="syz.2.170" path="socket:[6186]" dev="sockfs" ino=6186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.223992][ T3879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.233575][ T50] ================================================================== [ 43.241657][ T50] BUG: KCSAN: data-race in __flush_work / __flush_work [ 43.248528][ T50] [ 43.250855][ T50] write to 0xffff8881223aa3e8 of 8 bytes by task 3998 on cpu 0: [ 43.251110][ T4002] loop0: detected capacity change from 0 to 128 [ 43.258473][ T50] __flush_work+0x30b/0x570 [ 43.258501][ T50] flush_delayed_work+0x66/0x70 [ 43.274066][ T50] io_fallback_tw+0x24b/0x320 [ 43.278756][ T50] tctx_task_work_run+0xd1/0x1b0 [ 43.283707][ T50] tctx_task_work+0x40/0x80 [ 43.288222][ T50] task_work_run+0x13a/0x1a0 [ 43.292808][ T50] do_exit+0x5dd/0x1720 [ 43.296961][ T50] do_group_exit+0x102/0x150 [ 43.301563][ T50] get_signal+0xf2f/0x1080 [ 43.305974][ T50] arch_do_signal_or_restart+0x95/0x4b0 [ 43.311519][ T50] syscall_exit_to_user_mode+0x59/0x130 [ 43.317083][ T50] do_syscall_64+0xd6/0x1c0 [ 43.321599][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.327590][ T50] [ 43.329898][ T50] read to 0xffff8881223aa3e8 of 8 bytes by task 50 on cpu 1: [ 43.337260][ T50] __flush_work+0x42a/0x570 [ 43.341767][ T50] flush_delayed_work+0x66/0x70 [ 43.346606][ T50] io_uring_try_cancel_requests+0x35b/0x370 [ 43.352506][ T50] io_ring_exit_work+0x148/0x500 [ 43.357436][ T50] process_scheduled_works+0x483/0x9a0 [ 43.362910][ T50] worker_thread+0x526/0x700 [ 43.367500][ T50] kthread+0x1d1/0x210 [ 43.371585][ T50] ret_from_fork+0x4b/0x60 [ 43.375995][ T50] ret_from_fork_asm+0x1a/0x30 [ 43.380762][ T50] [ 43.383079][ T50] value changed: 0x0000000000400000 -> 0xffff88810006c00d [ 43.390172][ T50] [ 43.392483][ T50] Reported by Kernel Concurrency Sanitizer on: [ 43.398650][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted 6.11.0-rc1-syzkaller-00334-ga5dbd76a8942 #0 [ 43.409310][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 43.419352][ T50] Workqueue: iou_exit io_ring_exit_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 43.424887][ T50] ================================================================== [ 43.464745][ T4004] loop0: detected capacity change from 0 to 128 [ 43.923140][ T1623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.000952][ T1623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.080280][ T1623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.139959][ T1623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.222582][ T1623] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.270466][ T1623] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.310251][ T1623] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.381194][ T1623] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.449466][ T1623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.510162][ T1623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.556467][ T1623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.601502][ T1623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.675227][ T1623] bridge_slave_1: left allmulticast mode [ 44.680980][ T1623] bridge_slave_1: left promiscuous mode [ 44.686697][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.695992][ T1623] bridge_slave_0: left allmulticast mode [ 44.701707][ T1623] bridge_slave_0: left promiscuous mode [ 44.707632][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.719981][ T1623] bridge_slave_1: left allmulticast mode [ 44.725796][ T1623] bridge_slave_1: left promiscuous mode [ 44.731470][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.739145][ T1623] bridge_slave_0: left allmulticast mode [ 44.744842][ T1623] bridge_slave_0: left promiscuous mode [ 44.750557][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.758689][ T1623] bridge_slave_1: left allmulticast mode [ 44.764329][ T1623] bridge_slave_1: left promiscuous mode [ 44.770006][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.777800][ T1623] bridge_slave_0: left allmulticast mode [ 44.783427][ T1623] bridge_slave_0: left promiscuous mode [ 44.789097][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.797393][ T1623] bridge_slave_1: left allmulticast mode [ 44.803094][ T1623] bridge_slave_1: left promiscuous mode [ 44.808848][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.816564][ T1623] bridge_slave_0: left allmulticast mode [ 44.822248][ T1623] bridge_slave_0: left promiscuous mode [ 44.827940][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.279826][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.290358][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.300328][ T1623] bond0 (unregistering): Released all slaves [ 45.309321][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.319920][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.330254][ T1623] bond0 (unregistering): Released all slaves [ 45.339830][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.349748][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.359894][ T1623] bond0 (unregistering): Released all slaves [ 45.368548][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.378507][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.388559][ T1623] bond0 (unregistering): Released all slaves [ 45.660400][ T1623] hsr_slave_0: left promiscuous mode [ 45.666086][ T1623] hsr_slave_1: left promiscuous mode [ 45.672071][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.679509][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.688998][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.696389][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.705606][ T1623] hsr_slave_0: left promiscuous mode [ 45.712616][ T1623] hsr_slave_1: left promiscuous mode [ 45.718450][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.725898][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.734198][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.741645][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.751770][ T1623] hsr_slave_0: left promiscuous mode [ 45.757450][ T1623] hsr_slave_1: left promiscuous mode [ 45.763127][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.770557][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.778008][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.785550][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.797258][ T1623] veth1_macvtap: left promiscuous mode [ 45.802749][ T1623] veth0_macvtap: left promiscuous mode [ 45.808296][ T1623] veth1_vlan: left promiscuous mode [ 45.813513][ T1623] veth0_vlan: left promiscuous mode [ 45.819698][ T1623] veth1_macvtap: left promiscuous mode [ 45.825362][ T1623] veth0_macvtap: left promiscuous mode [ 45.830969][ T1623] veth1_vlan: left promiscuous mode [ 45.836212][ T1623] veth0_vlan: left promiscuous mode [ 45.842166][ T1623] veth1_macvtap: left promiscuous mode [ 45.847682][ T1623] veth0_macvtap: left promiscuous mode [ 45.853197][ T1623] veth1_vlan: left promiscuous mode [ 45.858507][ T1623] veth0_vlan: left promiscuous mode [ 46.022183][ T1623] team0 (unregistering): Port device team_slave_1 removed [ 46.086228][ T1623] team0 (unregistering): Port device team_slave_1 removed [ 46.096181][ T1623] team0 (unregistering): Port device team_slave_0 removed [ 46.156730][ T1623] team0 (unregistering): Port device team_slave_1 removed [ 46.166811][ T1623] team0 (unregistering): Port device team_slave_0 removed [ 47.185862][ T1623] bridge_slave_1: left allmulticast mode [ 47.191741][ T1623] bridge_slave_1: left promiscuous mode [ 47.197441][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.205203][ T1623] bridge_slave_0: left allmulticast mode [ 47.210976][ T1623] bridge_slave_0: left promiscuous mode [ 47.216785][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.329246][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.338996][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.349172][ T1623] bond0 (unregistering): Released all slaves [ 47.429368][ T1623] hsr_slave_0: left promiscuous mode [ 47.434993][ T1623] hsr_slave_1: left promiscuous mode [ 47.440987][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.448625][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.501615][ T1623] team0 (unregistering): Port device team_slave_1 removed [ 47.511798][ T1623] team0 (unregistering): Port device team_slave_0 removed