last executing test programs: 4.603526233s ago: executing program 4 (id=1742): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x36a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) r6 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000002c0)={[], [{@fsname}]}, 0x1, 0x598, &(0x7f0000000800)="$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") socket$inet6(0xa, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095", @ANYRESOCT=r3, @ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x2005400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x315b081, &(0x7f0000003b40)=ANY=[], 0x8, 0x2f3, &(0x7f0000000dc0)="$eJzs3L9PE2EYwPGnPyhtCZTBaDQxvNFFlwtUZ6UxkBibSJAafyQmB1y16dmSXoOpMSKTq/GPcCCMbCTKP8DipouLG4uJgwzGml7vKG2PVqClCN9PQu7h3vfpve/dQZ73wrH14N3zbNrS0npR/GElPhGRbZFh8YvL52z9dhyS3d7I1YGfXy7ee/joTiKZnJhWajIxcy2ulBoa+fjiVcTptt4vm8NPtn7Ev2+e3Ty/9WfmWcZSGUvl8kWlq9n8t6I+axpqPmNlNaWmTEO3DJXJWUah2p6vtqfN/MJCSem5+cHoQsGwLKXnSiprlFQxr4qFkgo81TM5pWmaGowK2kmtTE/riQMmz3V4MOiSQiGhB0Qk0tSSWunJgAAAQE811v9+UZ2s/1cvbRQH7q8NOfX/esir/r/+tfpZdfV/WEQ863/3+J71v76/+r+5IjpdDlX/43gYCTXt8tXCSmMhoUedn1/b8uPVUTug/gcAAAAAAAAAAAAAAAAAAAAA4H+wXS7HyuVyzN26X/0iEhYR93uP1ICI3OzBkNFBh7j+OAFqL+4Fh0TMt4upxVR163TYEBFTDBmVmPy27wdHJXbfPFIVw/LJXHLylxZTAbslkZaMnT8msT5pzC+XJ28nJ8ZUVX1+n0R358clJmdEItKcH/fMD8mVy7vyNYnJ5znJiynz9jhq+a/HlLp1N9mQH7H7AQAAAABwEmhqh+f6XdP2aq/m76yvG58PBGrr61HP9XlQLgR7O3cAAAAAAE4Lq/Qyq5umUWgRRKR9n4MHwS59sjvDf81y/5ahezNtEbgHr2sKOzs7flp8+zgtewR+OUjWSGU26rCzcB8b7dVHpsa7d72WW12Uc+8//OrcsW6shdvM1A0k3L5PfRBofQP0HckvHwAAAABHqlb0u3vGezsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOoaP4/3a9niMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwXPwNAAD//49M/rk=") unlink(&(0x7f0000000100)='./file1\x00') r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000000)='.\x00', 0x400017e) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r2, r5, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x45, 0x0, r6, &(0x7f0000000340)={0x3018}, r0}) r11 = socket$kcm(0x10, 0x2, 0x4) close(r11) socketpair(0x1f, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r12, 0x0, r11, 0x0, 0x4ffe6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r14, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/79, 0x4f}], 0x1, 0x92, 0x0) 3.668624418s ago: executing program 4 (id=1752): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15aba33a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f722fc58055b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775aafb8c5509086fdba99dba8fbbc7557df3769126732212b33004a42396dc614c501eddeec8a88861f6de3c01bcdf31dfbd3e1165bbb954434723aa31dfedf3d91791aed6773b6ba1b221c46e5f2c9d6e55a659b29b7865b0a4a66d7ae364022"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffe04, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000018b24e758de0865b1d588f68", @ANYRES16=r5, @ANYBLOB="01070000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2c241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000874000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/174) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x24004000}, 0x400c040) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1022, 0x8000000000012) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000440)={0x7, 0xb0, 0x1, 0x3ff, 0x7, "f8436a47f9cce334872227a298fc2ea7f7360d", 0x4, 0xfffffffd}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f00000000c0)) 3.541221688s ago: executing program 4 (id=1753): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r1, &(0x7f0000001480)=""/4096, 0x38) 3.482378153s ago: executing program 4 (id=1754): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001500)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000001100)=""/40, 0x28}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/162, 0xa2}], 0x1, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r3 = memfd_secret(0x0) utimensat(r3, 0x0, 0x0, 0x0) mlockall(0x5) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000580)='g', 0x1, 0x0, 0x0, 0x0) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x27, 0x0, '.\x00'}}) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000c00)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0x18}}], 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.218726315s ago: executing program 4 (id=1757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20400a, &(0x7f00000008c0)={[{@stripe={'stripe', 0x3d, 0x40000003}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@data_err_ignore}, {@noinit_itable}, {@grpjquota}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000900", @ANYRES32=0x0, @ANYBLOB="150002000000000000000000db6f199c099f2da104"], 0x44}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141141, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, 0x17ffffd, 0x0) fallocate(r1, 0x8, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000180)=""/221, 0xdd}], 0x1) splice(r3, 0x0, r4, 0x0, 0xffffffe1, 0x0) 2.989677513s ago: executing program 4 (id=1759): r0 = inotify_init1(0x0) ptrace(0x10, 0x1) (async) fcntl$setown(r0, 0x8, 0xffffffffffffffff) (async, rerun: 32) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) (rerun: 32) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000a00)=""/123) (async) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0) (async) readv(r2, &(0x7f00000019c0)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.17004326s ago: executing program 3 (id=1767): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaacbaaaaaaaaaaaa86dd6010104000680600fe5e77599c00000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a4c2000090780000220503c0ab080a00000000000000001e043d870402000a8bfbd54ae56dd076000d3601000000000000007e502211bdc6424e33b09af5799135a180482913127232407c806eb86cc8000000000000000002000000"], 0x0) syz_emit_ethernet(0xad, &(0x7f00000014c0)={@multicast, @random="354be6d0881d", @void, {@generic={0x8917, "5dcd9bec3772fa8c4548331712550df160c973402ed3fa9a479fa02fe387e6d25b742de60b80c42c950802a4a5ae1bd6b4aeb3f0e662a59eb1ec3915ee14b559996d85edd3c6a35081446c0f259b84807afac39bfb215a555813a2404fd63e1b0c7b144e010133dfe27b3839503aa1fed20f6c8b75bb987ff4393c3e804e382c7938e20d4fb3b751110f92a2f8a7497e0ffb458074d97f95e6127a7c867da1"}}}, &(0x7f0000000200)={0x0, 0x4, [0x4a2, 0xc11, 0x6b0, 0x65b]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2}}, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x204400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0xfffffffb, 0x83d, 0xb, 0x300e, r1, 0x15ec, '\x00', r7, r8, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) 2.05260064s ago: executing program 3 (id=1770): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) open(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="0222c4e0e05341b87414020000", @ANYRES16=r4, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendto$inet(r3, &(0x7f0000000400)="a7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080), 0x8) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000003a000000947b35174a00ba7ebdbde8cd166188543336c86a4f8fe3f77a4bde432e8c5cffb3ed43068a8c3b0139ddc53708bb1d69a4d4382f93d205dac2bb"], &(0x7f00000003c0)=0x5e) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r6, 0x0) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x400, 0x165) dup3(r5, r7, 0x80000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) 1.505985335s ago: executing program 3 (id=1773): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x2b) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r2, 0x0) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack_perm, @md5sig={0x13, 0x3c, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000300)={0x71, 0x5, 0x1, 'queue1\x00', 0x7}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) write$binfmt_aout(r3, &(0x7f0000002140)=ANY=[], 0xff2e) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 1.175001374s ago: executing program 3 (id=1778): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 1.165308035s ago: executing program 1 (id=1779): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1002}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {}, {}, {}, {}]}]}]}]}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1002}, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {}, {}, {}, {}]}]}]}]}]}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000) (async) 1.075596383s ago: executing program 3 (id=1780): migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x680000, &(0x7f0000000140)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000008a3b95dd0a0000000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000000)=""/59, 0x3b, 0x0, &(0x7f00000003c0)=""/89, 0x59}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r5], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x9}, 0x48) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r9, 0x6d05, 0x0) splice(r8, 0x0, r7, 0x0, 0x9aa7, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0xd, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x60002, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x48) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xc}, [@snprintf]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x55, &(0x7f0000000240)=""/85, 0x40f00, 0x4, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x6, 0x1, 0x8}, 0x10, r5, r2, 0x2, &(0x7f0000000600)=[r6, r8, r10, 0xffffffffffffffff, 0xffffffffffffffff, r11, r12, r13, r14], &(0x7f0000000640)=[{0x1, 0x5, 0xb, 0x4}, {0x1, 0x2, 0xb, 0x1}], 0x10, 0x3}, 0x90) waitid(0x2, 0x0, &(0x7f0000002b80), 0x1, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r0, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r15}}], 0x20}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000400)={[{@data_err_abort}, {@noblock_validity}]}, 0x9, 0x5f2, &(0x7f0000002540)="$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") 1.017266997s ago: executing program 1 (id=1781): r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0xfa, 0x40, 0x9, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000280)}, 0x5000, 0x6, 0xc, 0x4, 0xb, 0x9, 0x60, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xffffffffffffffff}, 0x10001, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xfffffffffffffffe, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010002000900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800900010068617368000000001c000280080001400000000f080002400000000008000340000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) fdatasync(r1) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3822724, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") ioprio_set$pid(0x1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x119a}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bbf8c07", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(r3) 761.434908ms ago: executing program 0 (id=1785): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = dup3(r0, r0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0xe5f3, 0x4000) (async) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x1002000, &(0x7f0000000200)='+u{(+\x00') (async) r2 = gettid() bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x8001, @remote, 0x1}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@delneigh={0x2c, 0x1d, 0x100, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x80, 0x2, 0x9}, [@NDA_SRC_VNI={0x8, 0xb, 0x9}, @NDA_NH_ID={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc810}, 0x400a801) r4 = io_uring_setup(0x4bc4, &(0x7f0000000680)={0x0, 0x706a, 0x20, 0x0, 0x377, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000700)=[r1], 0x1) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000740)={0x0, 0x6, 0x8, [0x0, 0x9, 0xe, 0x7, 0xe, 0x7ff, 0x6, 0x3]}, &(0x7f0000000780)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000007c0)={r5, 0xfffe, 0x9, [0x81, 0x8, 0xb, 0x2, 0xbc83, 0x3, 0x5, 0xffff, 0x3ff]}, &(0x7f0000000800)=0x1a) r6 = syz_open_dev$evdev(&(0x7f0000000840), 0x10, 0x34000) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000880)=""/183) (async) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x10, 0x3f8, 0x100, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040010}, 0x85) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000a40)={0xffff, 0x1, 0x207, 0x80000000, 0x8, 0x9, 0x9, 0xd1}, &(0x7f0000000a80)=0x20) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000c80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r8, r9}}, './file0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x512fadba0105bedf}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@bridge_getvlan={0x40, 0x72, 0x10, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2) (async) set_mempolicy(0x8000, &(0x7f0000000dc0)=0x6, 0x5) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000e00)=0x12) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000e40)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, 0x1410, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000f80)=0x1, 0x4) (async) ptrace$setregs(0xf, r2, 0x7fff, &(0x7f0000000fc0)="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") sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r10, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x44}}, 0x20000000) 760.600818ms ago: executing program 0 (id=1787): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x90) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {r1, r2/1000+60000}}, 0x0) getitimer(0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0xfffffe57) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0xc044) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14002000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000aa1000000e4a0000002000650e030000000500000008000000"], 0x88}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0xffffffffffffffff) close(r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff03) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x12740ca, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r9, &(0x7f0000000100)='fd/4\x00') 665.203216ms ago: executing program 0 (id=1788): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000000)={0x11, {{0x29, 0x0, 0x4000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xe2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c21635b", @ANYRES16=r2, @ANYBLOB="030300000000000000000c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2040082, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766c26e6f3d", @ANYRESHEX=r3, @ANYBLOB=',cache=loose,posixacl,mmap,access=', @ANYRESDEC=0x0, @ANYBLOB=',context=staff_u,smackfsfloor=\x00,\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x7ff, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) dup2(r4, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) personality(0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x67, &(0x7f00000007c0)=ANY=[@ANYBLOB="92e7ff808046f190e6fbb3ca85b185ae17c2e5c5aa64a5b4bbf9144ee10f09aa461468cc970a73aa10d4dd77dde44e00794664318490e5a2c02cdb98e23b86bf407f2792d8ebc6174b7f80888729fe0d8fefe94ec238d46aa00674ecbea22e1a9b4a8093bdb1ec9d23e57056d4471284ced8234ede35dc245e337adbb65eb69dbaca4dd89d14cc37665ce845c560e687a7d01cce6f59adbd026654275014448e659f8e39eab03ff85403256808731d74f0d74b43d523388785d546ffe3db7baed55188c22e3c74a3cdf188a050fa51247509447a1003a75f37e0ee1b35202aa0b78c0a1274d68f1a83889700"/248, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX=r6, @ANYRES32=r3], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x922af7fa06b2c723, 0x10, 0x0, 0x17}, 0x90) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r9 = dup2(r8, r8) setsockopt$inet6_int(r9, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) write$tun(r9, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r9, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 664.165325ms ago: executing program 0 (id=1789): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffe04, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000018b24e758de0865b1d588f68", @ANYRES16=r5, @ANYBLOB="01070000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2c241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000874000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/174) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x24004000}, 0x400c040) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) setrlimit(0x2, &(0x7f00000000c0)) 651.420307ms ago: executing program 0 (id=1790): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 621.624689ms ago: executing program 2 (id=1791): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x36, 0x38, 0x34, 0x66, 0x65, 0x65, 0x65], 0x2d, [0x65, 0x62, 0x63, 0x36], 0x2d, [0x32, 0x33, 0x34, 0x56], 0x2d, [0x66, 0x30, 0x39, 0x37], 0x2d, [0x34, 0x36, 0x37, 0x63, 0x39, 0x64, 0x66, 0x37]}}}]}) 581.166502ms ago: executing program 2 (id=1792): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x9, &(0x7f00000002c0)=[{0x40, 0x80, 0x49}, {0x1, 0x3, 0x7, 0x1}, {0x3, 0xd5, 0x1d}, {0x9, 0x6, 0x2, 0x4}, {0x18d4, 0x25, 0x0, 0x5}, {0x3f, 0x3, 0x20, 0x17c7e957}, {0x928, 0x80, 0x5, 0xfc}, {0x1, 0x4, 0xe6}, {0xfd9a, 0x7f, 0x54, 0xfffffffd}]}) futex_waitv(&(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000001000)={0x77359400}, 0x0) (async) futex_waitv(&(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000001000)={0x77359400}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) (async) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f0000000280)=0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, r5, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r7, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000000000000700000094040001000000001f000000000000000000000008"], 0x38}}], 0x1, 0x0) (async) sendmmsg$inet(r7, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000000000000700000094040001000000001f000000000000000000000008"], 0x38}}], 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x4}, &(0x7f0000000140), &(0x7f0000000100)) 580.577902ms ago: executing program 0 (id=1793): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@usrjquota}, {@sysvgroups}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf6}}]}, 0xfe, 0x44f, &(0x7f0000000900)="$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") r0 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r2, &(0x7f00000003c0)=""/179, 0xb7) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) 385.257118ms ago: executing program 2 (id=1794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40}, 0x90) timer_create(0x7, &(0x7f0000001080)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000010c0)) timer_gettime(0x0, &(0x7f0000001100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x100) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x100) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x6256, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x9c) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r7, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r8}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r7, &(0x7f0000000600), &(0x7f00000006c0)=@tcp6=r8}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r7, &(0x7f0000000800)="e8", &(0x7f00000008c0)=@tcp6=r9}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000010000f0000000000000000000000000a"], 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000010000f0000000000000000000000000a"], 0x28}}, 0x0) 380.152129ms ago: executing program 2 (id=1795): socket(0x15, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000867000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x2, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000144000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x76, 0x1, 0x0, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00002b7000/0x2000)=nil, 0x2000, &(0x7f0000000180)='/\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb01500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140), 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0x1a, 0x0, 0x0, 0x0, 0x104, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000580)='cpu&-\x00\x00\x00|\x93\xeco\xb3.i\xc3\xefT\x91\x8d:\xb7\xc2\x03\xf6\a5ND\x13\xe6\xf9\xac@\"\xae\x86,\x19\x8bI\xa4r\xab\x1dj\x91\xbc\xbd\xc0\x97oZ`V0\xe2\xf7\xfb,1\xec\'c\xad\xee\xc0\x1b\xeb\x18\xf4\x91\xda8\xae\xcdW%\xdd2') listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 195.050844ms ago: executing program 1 (id=1796): unshare(0x42000000) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x64, 0x4, 0x368, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) 133.255179ms ago: executing program 3 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00038008000380040004000c00018008000100", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000e956", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x8000, 0xffff, 0x2}, {0x0, 0x9}, {0x3}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) fcntl$getflags(r7, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r9, 0x4b40, 0xfffffffffffffffc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r10, 0x80089419, &(0x7f00000002c0)) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_CAPBSET_DROP(0x18, 0x3) 102.338421ms ago: executing program 1 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, r1, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/211, 0xd3}], 0x1) mkdir(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x90) r3 = socket(0x18, 0x4, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200)=0x5, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000003000000000000000001000000090001007b797a300000000020000000030a010200001e0000000000010000000900010073797a3000000000140000001100010000000000000000190000000a00"/104], 0x68}}, 0x0) 63.429524ms ago: executing program 2 (id=1799): socket$inet_smc(0x2b, 0x1, 0x0) gettid() (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000600), 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000340)={0x67446698, 0x0, 0x2, 0x4, 0x4, "5e8802c566c3d8403a526cf817317d246cf55e1cc69a9a702d6e007a60bea30e81c7d2930437214998e913a636e6df03bdbf618f0214b9c805007445d2a9d1a167b1505b43a12ad7df60c3505527ab8129ac5742bf6724e5dbcf5bde1a6854deb21e494bc936ad507c5e1fe1490e5adf7cbd840970988112c494e534dd66235a51dcf3e07f80fa6adeccf6e1efe526a01c7979ae8e7c05549fe9edada70f698455a51134223acc304d23ae5aeea9738640d66d2a76bf0dcc80bb6a6a05"}, 0xcd) (async) read(r1, &(0x7f0000000440)=""/247, 0x26) (async) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000090000000800040000000000"], 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x81, @time={0x0, 0x90f9}}) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x44a, &(0x7f0000001380)="$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") (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x52000, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x40040080}, 0x1) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x2d, 0x2, @val=@netfilter}, 0x40) (async) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x9f\x8c\xf0Q\x16\xaf\xba\xe7\x89\x04U\t\xa9\t\xc6(\nK\x10\x15\xb0\xd9\xa9j\x04\xad\xb9)\r\x03\xa6\xa9\xd7\xb4\xa7\xd3\xb4\xbc\x96\x19i#\xc6v\xf2\xc8j97\x1fn\x97\t\xadFa\xfa\xb4\xcd\x14n\t\xd9\xf9g\x86\x90\x9b\xa8\xd0\x7f.=~\x03\xcb\xc2|y\x0e\x95\xcf\x99\xef\xb1\xaaT8z\xb1\xbe\xef\xd9\xba\xad\x13\xfaK_\xb5\v\x1c\xae9\xf8@\xd0\xafa\xe7\x9ar/\x8d\xca\x11\bX\xb0\x19\x904&]\xa4\x98x\xd5\x10HB\t\x00\x00\x00\x00\x00\x00\x00\x93G\xdd\x15\x92t\xd1C\x8aR\x83\xaa\xde\xa9d\xb5\n_\x91\xde\xff\xa8\xb4J\xd0\rj\x81\xbb1\x12\x120\x97\x9fhoZp4\xc6[`\x01\xa0\x96\r\xce\xbc\xca\xdb+\xc6\xe4a^/Q3\xc3G\r}s\x8d:\xfc\x98sNph\xe0\xab\x97\r\x86\x8a\x03B\xf4?\x9d|\xa2?\x94\xab\xddl\b\x8a\x00\x8b\xcc\xfe') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003b1a00009500000000000000292fb466c37c15935c0400dc3d368670e761bf47cbbe68db99eec72d4354d4730e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) (async) socket$inet6(0xa, 0x80002, 0x0) 57.651935ms ago: executing program 1 (id=1800): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffe04, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000018b24e758de0865b1d588f68", @ANYRES16=r5, @ANYBLOB="01070000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2c241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000874000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/174) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) setrlimit(0x2, &(0x7f00000000c0)) 773.739µs ago: executing program 2 (id=1801): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000200000000009500"/25, @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2e7}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x84}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xd5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x201805a, &(0x7f0000000d80)={[{@abort}, {@nogrpid}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000e80)={0x2, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x47a, &(0x7f0000000900)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast2}}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f00000000c0)={{0x29, @rand_addr=0x64010101, 0x0, 0x3, 'sh\x00', 0x24, 0xbf47, 0x70}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e21, 0x2000, 0x0, 0xfffffcba, 0xfffffffb}}, 0x44) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010003df600"/20, @ANYRES32=0x0, @ANYRES64=r4], 0x40}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 0s ago: executing program 1 (id=1802): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@dioread_lock}, {@usrjquota}, {@barrier}, {@norecovery}, {@auto_da_alloc}, {@dax}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@journal_checksum}, {@quota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) unshare(0x68060200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000ff000007"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@ipv6_getnetconf={0x7c, 0x52, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1ac}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8003}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8001}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x10001}, @NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}]}, 0x7c}}, 0x1) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x34, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, r8, 0x2, 0x44}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): face batadv_slave_1 (retrying later): interface not active [ 128.356351][ T9295] hsr_slave_0: entered promiscuous mode [ 128.364524][ T9295] hsr_slave_1: entered promiscuous mode [ 128.445502][ T9392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9392 comm=syz.0.1376 [ 128.446255][ T9295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.487577][ T9295] Cannot create hsr debugfs directory [ 128.601974][ T9398] loop0: detected capacity change from 0 to 256 [ 128.647725][ T29] audit: type=1400 audit(1722569578.229:1774): avc: denied { mounton } for pid=9395 comm="syz.1.1378" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 128.713071][ T9398] FAT-fs (loop0): IO charset as not found [ 128.841291][ T9295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.869327][ T8173] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /70/file0: bad entry in directory: inode out of bounds - offset=76, inode=2320, rec_len=16, size=1024 fake=0 [ 128.922012][ T9419] loop3: detected capacity change from 0 to 512 [ 128.930352][ T9419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.933018][ T9295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.975259][ T9419] EXT4-fs (loop3): 1 truncate cleaned up [ 128.976870][ T9421] loop0: detected capacity change from 0 to 1024 [ 129.022297][ T9421] EXT4-fs: Ignoring removed orlov option [ 129.028086][ T9421] ext4: Unknown parameter 'noacl' [ 129.065094][ T9295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.099970][ T9431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9431 comm=syz.1.1387 [ 129.258003][ T9295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.286660][ T9434] loop1: detected capacity change from 0 to 8192 [ 129.424727][ T9434] loop1: p1 p2 [ 129.430914][ T9434] loop1: p1 start 16777472 is beyond EOD, truncated [ 129.437615][ T9434] loop1: p2 start 67698708 is beyond EOD, truncated [ 129.451562][ T9295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.473031][ T9295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.517997][ T9295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.530424][ T9295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.589530][ T6400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.648098][ T6400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.658676][ T9368] can0 (unregistered): slcan off ptm0. [ 129.689169][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.720300][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.731352][ T6400] bond0: (slave netdevsim1): Releasing backup interface [ 129.793471][ T6400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.811319][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.818735][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.861477][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.868620][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.883068][ T9460] netlink: 'syz.3.1394': attribute type 4 has an invalid length. [ 129.900040][ T6400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.904001][ T9464] loop1: detected capacity change from 0 to 164 [ 129.943297][ T9468] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9468 comm=syz.3.1398 [ 129.958714][ T9295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.969241][ T9295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.048019][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 130.092087][ T6400] bridge_slave_1: left allmulticast mode [ 130.097932][ T6400] bridge_slave_1: left promiscuous mode [ 130.103630][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.129299][ T6400] bridge_slave_0: left allmulticast mode [ 130.135208][ T6400] bridge_slave_0: left promiscuous mode [ 130.141078][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.150761][ T9485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9485 comm=syz.3.1400 [ 130.345412][ T6400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.355941][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.366346][ T6400] bond0 (unregistering): Released all slaves [ 130.375565][ T6400] bond1 (unregistering): Released all slaves [ 130.384906][ T6400] bond2 (unregistering): Released all slaves [ 130.451619][ T9444] chnl_net:caif_netlink_parms(): no params data found [ 130.463038][ T9504] futex_wake_op: syz.3.1404 tries to shift op by 35; fix this program [ 130.470477][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.489594][ T6400] hsr_slave_0: left promiscuous mode [ 130.496326][ T6400] hsr_slave_1: left promiscuous mode [ 130.504141][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.511603][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.519259][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.526859][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.536171][ T6400] veth1_vlan: left promiscuous mode [ 130.541415][ T6400] veth0_vlan: left promiscuous mode [ 130.559528][ T9507] loop3: detected capacity change from 0 to 512 [ 130.585537][ T9507] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.626049][ T6400] team0 (unregistering): Port device team_slave_1 removed [ 130.638086][ T6400] team0 (unregistering): Port device team_slave_0 removed [ 130.690310][ T9507] erspan0: entered promiscuous mode [ 130.695683][ T9507] erspan0: entered allmulticast mode [ 130.771072][ T9520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9520 comm=syz.1.1407 [ 130.789610][ T9444] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.796779][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.806236][ T9066] EXT4-fs unmount: 20 callbacks suppressed [ 130.806255][ T9066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.824344][ T9444] bridge_slave_0: entered allmulticast mode [ 130.831173][ T9444] bridge_slave_0: entered promiscuous mode [ 130.838461][ T9444] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.845733][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.853088][ T9444] bridge_slave_1: entered allmulticast mode [ 130.854401][ T9528] loop1: detected capacity change from 0 to 128 [ 130.859968][ T9444] bridge_slave_1: entered promiscuous mode [ 130.869305][ T9528] EXT4-fs: Ignoring removed nobh option [ 130.882366][ T9528] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.895293][ T9528] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.922038][ T9444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.970265][ T9444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.990070][ T9295] veth0_vlan: entered promiscuous mode [ 131.034044][ T8921] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.049735][ T9295] veth1_vlan: entered promiscuous mode [ 131.056028][ T9471] chnl_net:caif_netlink_parms(): no params data found [ 131.072552][ T9444] team0: Port device team_slave_0 added [ 131.091643][ T9444] team0: Port device team_slave_1 added [ 131.125769][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.133166][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.159149][ T9444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.180026][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.187022][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.213319][ T9444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.251581][ T9559] program syz.1.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.271431][ T9471] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.278790][ T9471] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.286270][ T9471] bridge_slave_0: entered allmulticast mode [ 131.293098][ T9471] bridge_slave_0: entered promiscuous mode [ 131.302826][ T9471] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.309970][ T9471] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.317676][ T9471] bridge_slave_1: entered allmulticast mode [ 131.324213][ T9471] bridge_slave_1: entered promiscuous mode [ 131.353564][ T9444] hsr_slave_0: entered promiscuous mode [ 131.359805][ T9444] hsr_slave_1: entered promiscuous mode [ 131.365691][ T9444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.373572][ T9444] Cannot create hsr debugfs directory [ 131.404310][ T9471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.415940][ T9471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.449670][ T9295] veth0_macvtap: entered promiscuous mode [ 131.459305][ T9568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9568 comm=syz.3.1416 [ 131.493646][ T9471] team0: Port device team_slave_0 added [ 131.509776][ T9295] veth1_macvtap: entered promiscuous mode [ 131.518212][ T9471] team0: Port device team_slave_1 added [ 131.573010][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.583716][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.593581][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.604305][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.614176][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.624629][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.634657][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.645212][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.658532][ T9572] loop3: detected capacity change from 0 to 1024 [ 131.659763][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.667777][ T9572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.672949][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.692140][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.718185][ T9471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.735579][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.742561][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.769129][ T9471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.784412][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.795312][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.805161][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.815768][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.825743][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.836251][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.846309][ T9295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.856985][ T9295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.867846][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.891205][ T9295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.900098][ T9295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.908850][ T9295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.917721][ T9295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.931176][ T9471] hsr_slave_0: entered promiscuous mode [ 131.938471][ T9471] hsr_slave_1: entered promiscuous mode [ 131.944497][ T9471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.952107][ T9471] Cannot create hsr debugfs directory [ 132.047060][ T9578] loop2: detected capacity change from 0 to 1024 [ 132.053953][ T9578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.054840][ T9471] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.061144][ T9578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.079457][ T9444] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.081317][ T9578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.103087][ T9444] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.112426][ T9444] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.121627][ T9444] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.134553][ T9471] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.148381][ T9295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.185023][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 132.198280][ T9444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.209808][ T9471] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.233362][ T9444] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.246477][ T9583] block device autoloading is deprecated and will be removed. [ 132.247130][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.261281][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.261585][ T9583] syz.1.1419: attempt to access beyond end of device [ 132.261585][ T9583] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 132.290243][ T9444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.300918][ T9444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.317626][ T9471] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.339595][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.346714][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.401598][ T9471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.418793][ T9471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.439683][ T9471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.458853][ T9444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.466944][ T9471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.508075][ T9597] netlink: 'syz.2.1422': attribute type 29 has an invalid length. [ 132.519440][ T9597] netlink: 'syz.2.1422': attribute type 29 has an invalid length. [ 132.528060][ T9066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.539449][ T9597] netlink: 'syz.2.1422': attribute type 29 has an invalid length. [ 132.584134][ T6400] IPVS: stop unused estimator thread 0... [ 132.607750][ T9471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.623598][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 132.623614][ T29] audit: type=1400 audit(1722569582.235:1819): avc: denied { read } for pid=9602 comm="syz.3.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.659363][ T9471] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.661575][ T9607] devpts: called with bogus options [ 132.675546][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.682676][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.697487][ T9609] loop3: detected capacity change from 0 to 2048 [ 132.739433][ T9609] loop3: p1 < > p2 < > p3 p4 < > [ 132.744543][ T9609] loop3: partition table partially beyond EOD, truncated [ 132.764116][ T9609] loop3: p1 start 2305 is beyond EOD, truncated [ 132.770539][ T9609] loop3: p2 start 4294902784 is beyond EOD, truncated [ 132.772502][ T9612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9612 comm=syz.1.1424 [ 132.777340][ T9609] loop3: p3 start 4278191616 is beyond EOD, truncated [ 132.813044][ T9471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.823704][ T9471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.839985][ T9444] veth0_vlan: entered promiscuous mode [ 132.849166][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.856262][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.884332][ T9444] veth1_vlan: entered promiscuous mode [ 132.893099][ T9617] loop1: detected capacity change from 0 to 512 [ 132.903322][ T9617] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1425: bg 0: block 5: invalid block bitmap [ 132.916567][ T9617] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 132.923220][ T9444] veth0_macvtap: entered promiscuous mode [ 132.933535][ T9617] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1425: invalid indirect mapped block 3 (level 2) [ 132.938791][ T9444] veth1_macvtap: entered promiscuous mode [ 132.950003][ T9617] EXT4-fs (loop1): 1 orphan inode deleted [ 132.958279][ T9617] EXT4-fs (loop1): 1 truncate cleaned up [ 132.964291][ T9617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.993357][ T9471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.009983][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.020541][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.030540][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.041634][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.051661][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.062158][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.072142][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.082583][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.092454][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.102966][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.114068][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.126091][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.136664][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.146492][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.157183][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.167188][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.178066][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.187925][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.198487][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.208363][ T9444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.218839][ T9444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.229945][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.247048][ T9444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.256417][ T9444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.265184][ T9444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.274096][ T9444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.356665][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1426'. [ 133.365993][ T9632] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1426'. [ 133.374945][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1426'. [ 133.409280][ T9641] loop2: detected capacity change from 0 to 1024 [ 133.418771][ T9641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.435318][ T9636] loop0: detected capacity change from 0 to 512 [ 133.445162][ T9641] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.450113][ T9471] veth0_vlan: entered promiscuous mode [ 133.466760][ T9471] veth1_vlan: entered promiscuous mode [ 133.478352][ T9636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.484368][ T9471] veth0_macvtap: entered promiscuous mode [ 133.498611][ T9471] veth1_macvtap: entered promiscuous mode [ 133.504921][ T9636] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.514830][ T9652] loop3: detected capacity change from 0 to 1024 [ 133.523234][ T9295] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 133.528218][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.534150][ T9636] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.542708][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.553501][ T9652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.561466][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.584477][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.594391][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.604885][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.614725][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.625253][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.635208][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.645762][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.655685][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.666219][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.691036][ T8921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.692062][ T9471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.707772][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 133.727994][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.738623][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.748516][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.751251][ T29] audit: type=1400 audit(1722569583.371:1820): avc: denied { ioctl } for pid=9659 comm="syz.2.1431" path="socket:[29967]" dev="sockfs" ino=29967 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 133.759291][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.794770][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.805243][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.815109][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.825607][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.835574][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.846076][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.856228][ T9471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.866902][ T9471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.882099][ T9471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.883585][ T9668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9668 comm=syz.2.1433 [ 133.891405][ T9471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.910784][ T9471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.919897][ T9471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.928738][ T9471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.946596][ T9066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.018677][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 134.048167][ T9678] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 134.075368][ T9673] loop1: detected capacity change from 0 to 128 [ 134.087995][ T9673] ramfs: Bad value for 'defcontext' [ 134.092290][ T29] audit: type=1400 audit(1722569583.712:1821): avc: denied { mount } for pid=9672 comm="syz.1.1435" name="/" dev="ramfs" ino=29488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.115686][ T29] audit: type=1400 audit(1722569583.712:1822): avc: denied { remount } for pid=9672 comm="syz.1.1435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.150813][ T29] audit: type=1400 audit(1722569583.773:1823): avc: denied { write } for pid=9672 comm="syz.1.1435" path="socket:[29492]" dev="sockfs" ino=29492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.202586][ T29] audit: type=1400 audit(1722569583.823:1824): avc: denied { read } for pid=9689 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.229824][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 134.251310][ T9687] vlan2: entered allmulticast mode [ 134.252458][ T29] audit: type=1400 audit(1722569583.873:1825): avc: denied { write } for pid=9692 comm="syz.2.1439" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.256550][ T9687] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 134.287676][ T29] audit: type=1400 audit(1722569583.903:1826): avc: denied { open } for pid=9692 comm="syz.2.1439" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.318857][ T29] audit: type=1400 audit(1722569583.903:1827): avc: denied { watch watch_reads } for pid=9695 comm="syz.0.1440" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.351151][ T9693] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1439'. [ 134.387668][ T9703] loop4: detected capacity change from 0 to 512 [ 134.406183][ T9703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.419077][ T9703] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.431704][ T29] audit: type=1400 audit(1722569584.054:1828): avc: denied { append } for pid=9702 comm="syz.4.1443" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.455417][ T9710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9710 comm=syz.0.1445 [ 134.510918][ T6397] bridge_slave_1: left allmulticast mode [ 134.516612][ T6397] bridge_slave_1: left promiscuous mode [ 134.522391][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.532823][ T6397] bridge_slave_0: left allmulticast mode [ 134.538630][ T6397] bridge_slave_0: left promiscuous mode [ 134.544477][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.576142][ T9727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 134.682122][ T6397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.693166][ T6397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.703961][ T6397] bond0 (unregistering): Released all slaves [ 134.713713][ T6397] bond1 (unregistering): Released all slaves [ 134.861219][ T6397] hsr_slave_0: left promiscuous mode [ 134.871604][ T6397] hsr_slave_1: left promiscuous mode [ 134.880509][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.880630][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.881291][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.881324][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.891920][ T6397] veth1_macvtap: left promiscuous mode [ 134.891945][ T6397] veth0_macvtap: left promiscuous mode [ 134.892028][ T6397] veth1_vlan: left promiscuous mode [ 134.892137][ T6397] veth0_vlan: left promiscuous mode [ 134.950189][ T9750] loop1: detected capacity change from 0 to 164 [ 135.028764][ T6397] team0 (unregistering): Port device team_slave_1 removed [ 135.041098][ T6397] team0 (unregistering): Port device team_slave_0 removed [ 135.055445][ T9752] loop3: detected capacity change from 0 to 1024 [ 135.068851][ T9752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.102568][ T9748] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1454'. [ 135.165046][ T9759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9759 comm=syz.2.1457 [ 135.179379][ T9066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.199833][ T9762] loop3: detected capacity change from 0 to 128 [ 135.217929][ T9762] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.238037][ T9702] Process accounting resumed [ 135.241739][ T9762] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.293347][ T9471] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.351732][ T9779] loop0: detected capacity change from 0 to 512 [ 135.360095][ T9066] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.378726][ T9779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.404095][ T9779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 135.414356][ T9779] System zones: 1-12 [ 135.423171][ T9786] loop3: detected capacity change from 0 to 512 [ 135.430371][ T9779] EXT4-fs (loop0): 1 truncate cleaned up [ 135.432835][ T9788] loop4: detected capacity change from 0 to 512 [ 135.436602][ T9779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.461293][ T9786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.461619][ T9788] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.478688][ T9788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.487272][ T9790] loop2: detected capacity change from 0 to 512 [ 135.498847][ T9786] EXT4-fs (loop3): 1 truncate cleaned up [ 135.505708][ T9786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.523984][ T9788] EXT4-fs (loop4): 1 orphan inode deleted [ 135.529854][ T9788] EXT4-fs (loop4): 1 truncate cleaned up [ 135.538601][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.546419][ T9788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.567087][ T9788] EXT4-fs (loop4): shut down requested (2) [ 135.570710][ T9795] loop2: detected capacity change from 0 to 128 [ 135.599273][ T9471] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.613008][ T9795] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.621362][ T9795] vhci_hcd: invalid port number 219 [ 135.626640][ T9795] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 135.638703][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1467'. [ 135.663383][ T9066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.719810][ T9805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.726228][ T9808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9808 comm=syz.3.1470 [ 135.729885][ T9805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.815226][ T9824] netlink: 'syz.4.1474': attribute type 7 has an invalid length. [ 135.857032][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 135.865990][ T9834] netlink: 'syz.4.1478': attribute type 1 has an invalid length. [ 135.925960][ T9842] dccp_v4_rcv: dropped packet with invalid checksum [ 135.957956][ T9842] syzkaller0: entered promiscuous mode [ 135.963727][ T9842] syzkaller0: entered allmulticast mode [ 136.024388][ T9846] loop0: detected capacity change from 0 to 2048 [ 136.035568][ T9846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.060674][ T9851] loop1: detected capacity change from 0 to 512 [ 136.069401][ T9846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.086273][ T9851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.099071][ T9851] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.137868][ T9857] loop0: detected capacity change from 0 to 1024 [ 136.145167][ T9857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.154491][ T9857] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 136.162714][ T9857] System zones: 0-1, 3-36 [ 136.168085][ T9857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.201495][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.253555][ T9866] loop0: detected capacity change from 0 to 256 [ 136.325069][ T9874] dvmrp1: entered allmulticast mode [ 136.374979][ T9880] loop0: detected capacity change from 0 to 2048 [ 136.388223][ T9881] loop2: detected capacity change from 0 to 1024 [ 136.392255][ T9880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.407322][ T9881] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.411746][ T9880] sock: sock_timestamping_bind_phc: sock not bind to device [ 136.418485][ T9881] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.433201][ T9881] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.440300][ T9881] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #3: block 3: comm syz.2.1491: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.454778][ T9881] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1491: Failed to acquire dquot type 0 [ 136.466525][ T9881] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #3: block 3: comm syz.2.1491: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.467213][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.483479][ T9881] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1491: Failed to acquire dquot type 0 [ 136.502635][ T9881] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.1491: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.516405][ T9881] EXT4-fs error (device loop2): ext4_map_blocks:609: inode #3: block 3: comm syz.2.1491: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.530853][ T9881] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1491: Failed to acquire dquot type 0 [ 136.542838][ T9881] EXT4-fs (loop2): 1 orphan inode deleted [ 136.549335][ T9881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.872174][ T8921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.934643][ T9894] loop3: detected capacity change from 0 to 256 [ 136.949873][ T9894] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 136.960145][ T9894] FAT-fs (loop3): Filesystem has been set read-only [ 136.969524][ T9894] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 136.981195][ T9894] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 136.992880][ T9894] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 137.004541][ T9893] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 137.015701][ T9894] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 137.027276][ T9893] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 137.042092][ T9894] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 137.052702][ T9893] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 137.065113][ T9894] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 137.135880][ T9901] loop1: detected capacity change from 0 to 2048 [ 137.163298][ T9295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.192699][ T9901] Alternate GPT is invalid, using primary GPT. [ 137.199294][ T9901] loop1: p2 p3 p7 [ 137.284807][ T9908] loop2: detected capacity change from 0 to 128 [ 137.298482][ T9908] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.318796][ T9908] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.354627][ T9901] netlink: 'syz.1.1500': attribute type 15 has an invalid length. [ 137.436086][ T9917] loop1: detected capacity change from 0 to 512 [ 137.455167][ T9295] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 137.475092][ T9917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.499449][ T9917] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.503072][ T9295] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 137.524997][ T9295] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 137.541123][ T9295] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 137.555413][ T9295] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 137.586021][ T9295] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 137.601450][ T9295] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 137.619514][ T9295] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 137.635225][ T9295] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 137.649596][ T9295] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 137.854830][ T9933] loop3: detected capacity change from 0 to 512 [ 137.869016][ T9933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.882105][ T9933] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.912115][ T9066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.001900][ T9945] loop3: detected capacity change from 0 to 1024 [ 138.017619][ T9945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.078073][ T9295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.088629][ T6397] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.148038][ T6397] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.198640][ T6397] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.247504][ T6397] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.269116][ T8921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.289140][ T9964] loop1: detected capacity change from 0 to 128 [ 138.317953][ T9952] chnl_net:caif_netlink_parms(): no params data found [ 138.329194][ T6397] bridge_slave_1: left allmulticast mode [ 138.334988][ T6397] bridge_slave_1: left promiscuous mode [ 138.340723][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.349011][ T6397] bridge_slave_0: left allmulticast mode [ 138.354797][ T6397] bridge_slave_0: left promiscuous mode [ 138.360542][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.485046][ T6397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.497878][ T6397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.508489][ T6397] bond0 (unregistering): Released all slaves [ 138.550824][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.558042][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.567814][ T9952] bridge_slave_0: entered allmulticast mode [ 138.575037][ T9952] bridge_slave_0: entered promiscuous mode [ 138.584028][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.591238][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.598519][ T9952] bridge_slave_1: entered allmulticast mode [ 138.605369][ T9952] bridge_slave_1: entered promiscuous mode [ 138.623455][ T6397] hsr_slave_0: left promiscuous mode [ 138.629208][ T6397] hsr_slave_1: left promiscuous mode [ 138.635221][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.642736][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.651513][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.659024][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.660554][ T9971] mmap: syz.4.1516 (9971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.681299][ T6397] veth1_macvtap: left promiscuous mode [ 138.687000][ T6397] veth0_macvtap: left promiscuous mode [ 138.692576][ T6397] veth1_vlan: left promiscuous mode [ 138.697843][ T6397] veth0_vlan: left promiscuous mode [ 138.821326][ T6397] team0 (unregistering): Port device team_slave_1 removed [ 138.834808][ T6397] team0 (unregistering): Port device team_slave_0 removed [ 138.855356][ T9066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.922497][ T9952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.925333][ T9981] loop3: detected capacity change from 0 to 1024 [ 138.945055][ T9978] loop4: detected capacity change from 0 to 2048 [ 138.955949][ T9981] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 138.964168][ T9952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.965724][ T9981] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 138.990932][ T9981] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 139.002751][ T9981] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: inode #5: comm syz.3.1519: unexpected bad inode w/o EXT4_IGET_BAD [ 139.016423][ T9981] EXT4-fs (loop3): no journal found [ 139.021720][ T9981] EXT4-fs (loop3): can't get journal size [ 139.028457][ T9978] loop4: p1 < > p4 [ 139.031137][ T9981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.045684][ T9978] loop4: p4 size 8388608 extends beyond EOD, truncated [ 139.059323][ T9978] loop0: detected capacity change from 0 to 16384 [ 139.095729][ T9986] syzkaller0: entered promiscuous mode [ 139.101303][ T9986] syzkaller0: entered allmulticast mode [ 139.109063][ T9952] team0: Port device team_slave_0 added [ 139.120032][ T9066] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.163744][ T9952] team0: Port device team_slave_1 added [ 139.195995][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.203035][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.229130][ T9952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.242899][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.250071][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.276135][ T9952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.383384][ T9952] hsr_slave_0: entered promiscuous mode [ 139.396668][ T9952] hsr_slave_1: entered promiscuous mode [ 139.404101][ T9952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.419401][ T9952] Cannot create hsr debugfs directory [ 139.553428][T10010] loop3: detected capacity change from 0 to 4096 [ 139.570916][T10010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.584892][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 139.584909][ T29] audit: type=1400 audit(1722569589.236:2014): avc: denied { map } for pid=10009 comm="syz.3.1526" path="/43/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.643270][ T29] audit: type=1400 audit(1722569589.286:2015): avc: denied { unlink } for pid=9066 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.685016][T10021] loop4: detected capacity change from 0 to 512 [ 139.685304][T10019] loop0: detected capacity change from 0 to 1024 [ 139.698191][T10019] EXT4-fs: Ignoring removed orlov option [ 139.724139][T10019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.724965][T10021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.753267][T10021] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.778859][T10021] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #12: block 32: comm syz.4.1531: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 139.799192][T10021] EXT4-fs error (device loop4): ext4_get_first_dir_block:3541: inode #12: comm syz.4.1531: directory missing '.' [ 139.822713][ T9471] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.823189][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.859508][ T9952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.869707][ T9952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.879052][ T9952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.888736][ T9952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.910654][T10016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.923440][T10035] __nla_validate_parse: 4 callbacks suppressed [ 139.923456][T10035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1534'. [ 139.957003][ T6397] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.974043][ T29] audit: type=1400 audit(1722569589.617:2016): avc: denied { read } for pid=10039 comm="syz.1.1536" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.001318][T10038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1535'. [ 140.010377][T10038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1535'. [ 140.034151][T10035] loop0: detected capacity change from 0 to 2048 [ 140.060619][T10041] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 140.090991][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.101704][ T6397] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.123352][ T9952] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.127657][T10035] Alternate GPT is invalid, using primary GPT. [ 140.136460][T10035] loop0: p1 p2 p3 [ 140.150933][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.158082][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.188916][ T6397] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.192410][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 140.213633][T10046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.222378][T10046] IPVS: stopping backup sync thread 10041 ... [ 140.229063][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.236234][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.254342][ T6397] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.319396][T10061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1541'. [ 140.359255][ T6397] bridge_slave_1: left allmulticast mode [ 140.364998][ T6397] bridge_slave_1: left promiscuous mode [ 140.370857][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.386000][ T6397] bridge_slave_0: left allmulticast mode [ 140.391707][ T6397] bridge_slave_0: left promiscuous mode [ 140.397463][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.408990][ T29] audit: type=1400 audit(1722569590.059:2017): avc: denied { tracepoint } for pid=10064 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.573418][ T6397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.586120][ T6397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.607423][ T6397] bond0 (unregistering): Released all slaves [ 140.691021][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.712074][ T6397] hsr_slave_0: left promiscuous mode [ 140.726247][ T6397] hsr_slave_1: left promiscuous mode [ 140.740878][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.749366][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.756523][ T29] audit: type=1326 audit(1722569590.410:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.0.1543" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4ac8973b9 code=0x0 [ 140.844742][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.852526][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.864801][T10079] FAULT_INJECTION: forcing a failure. [ 140.864801][T10079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.878032][T10079] CPU: 1 UID: 0 PID: 10079 Comm: syz.0.1545 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 140.888824][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 140.899015][T10079] Call Trace: [ 140.902306][T10079] [ 140.905250][T10079] dump_stack_lvl+0xf2/0x150 [ 140.909909][T10079] dump_stack+0x15/0x20 [ 140.914092][T10079] should_fail_ex+0x229/0x230 [ 140.918838][T10079] should_fail+0xb/0x10 [ 140.923015][T10079] should_fail_usercopy+0x1a/0x20 [ 140.928075][T10079] _copy_to_user+0x1e/0xa0 [ 140.932515][T10079] simple_read_from_buffer+0xa0/0x110 [ 140.937906][T10079] proc_fail_nth_read+0xfc/0x140 [ 140.942885][T10079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.948457][T10079] vfs_read+0x1a2/0x6e0 [ 140.952662][T10079] ? __rcu_read_unlock+0x4e/0x70 [ 140.957697][T10079] ? __fget_files+0x1da/0x210 [ 140.962409][T10079] ksys_read+0xeb/0x1b0 [ 140.966664][T10079] __x64_sys_read+0x42/0x50 [ 140.971270][T10079] x64_sys_call+0x2a36/0x2e00 [ 140.975970][T10079] do_syscall_64+0xc9/0x1c0 [ 140.980496][T10079] ? clear_bhb_loop+0x55/0xb0 [ 140.985633][T10079] ? clear_bhb_loop+0x55/0xb0 [ 140.990355][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.996286][T10079] RIP: 0033:0x7ff4ac895dfc [ 141.000765][T10079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 141.020470][T10079] RSP: 002b:00007ff4ab517040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.028894][T10079] RAX: ffffffffffffffda RBX: 00007ff4aca25f80 RCX: 00007ff4ac895dfc [ 141.036873][T10079] RDX: 000000000000000f RSI: 00007ff4ab5170b0 RDI: 0000000000000004 [ 141.044933][T10079] RBP: 00007ff4ab5170a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.052939][T10079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.060938][T10079] R13: 000000000000000b R14: 00007ff4aca25f80 R15: 00007ffcd4854428 [ 141.069005][T10079] [ 141.120195][ T6397] veth1_macvtap: left promiscuous mode [ 141.125753][ T6397] veth0_macvtap: left promiscuous mode [ 141.131298][ T6397] veth1_vlan: left promiscuous mode [ 141.136623][ T6397] veth0_vlan: left promiscuous mode [ 141.280677][T10087] loop0: detected capacity change from 0 to 1024 [ 141.296694][T10087] EXT4-fs: Ignoring removed oldalloc option [ 141.305332][T10087] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 141.329153][T10087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.346120][T10087] program syz.0.1547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.355841][ T6397] team0 (unregistering): Port device team_slave_1 removed [ 141.367433][ T6397] team0 (unregistering): Port device team_slave_0 removed [ 141.418791][T10043] chnl_net:caif_netlink_parms(): no params data found [ 141.473338][ T29] audit: type=1400 audit(1722569591.132:2019): avc: denied { audit_read } for pid=10093 comm="syz.4.1549" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.478244][T10094] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1549'. [ 141.517896][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.525159][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.538083][T10043] bridge_slave_0: entered allmulticast mode [ 141.545849][T10043] bridge_slave_0: entered promiscuous mode [ 141.563917][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.571131][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.598028][T10043] bridge_slave_1: entered allmulticast mode [ 141.604751][T10043] bridge_slave_1: entered promiscuous mode [ 141.620387][ T9952] veth0_vlan: entered promiscuous mode [ 141.648505][ T9952] veth1_vlan: entered promiscuous mode [ 141.656096][T10109] loop4: detected capacity change from 0 to 256 [ 141.666365][T10109] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.679710][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.698991][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.718250][ T9952] veth0_macvtap: entered promiscuous mode [ 141.746620][ T9952] veth1_macvtap: entered promiscuous mode [ 141.756900][T10043] team0: Port device team_slave_0 added [ 141.764074][T10043] team0: Port device team_slave_1 added [ 141.786699][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.793708][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.819830][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.831124][T10111] bridge_slave_1: left allmulticast mode [ 141.836870][T10111] bridge_slave_1: left promiscuous mode [ 141.842557][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.854702][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.865289][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.875132][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.885629][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.895675][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.906221][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.910446][ T29] audit: type=1400 audit(1722569591.553:2020): avc: denied { execute_no_trans } for pid=10116 comm="syz.1.1553" path="/72/file0" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.916088][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.949951][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.963642][T10117] loop1: detected capacity change from 0 to 1024 [ 141.971497][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.979861][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.980934][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.986866][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.022034][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.033849][T10117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.065224][T10043] hsr_slave_0: entered promiscuous mode [ 142.072276][T10043] hsr_slave_1: entered promiscuous mode [ 142.078331][T10043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.086028][T10043] Cannot create hsr debugfs directory [ 142.091961][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.102681][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.112591][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.123118][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.132968][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.143430][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.153256][ T9952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.163698][ T9952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.174731][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.187522][ T9952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.196404][ T9952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.205355][ T9952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.214231][ T9952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.423696][T10142] loop2: detected capacity change from 0 to 2048 [ 142.457669][T10142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.479499][T10142] program syz.2.1559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.533214][T10043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 142.552375][T10043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 142.569354][ T9952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.590321][T10043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 142.603315][T10043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 142.701364][T10043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.740230][T10043] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.760585][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.767778][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.780569][ T8921] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.810491][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.817756][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.092411][T10043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.202313][ T29] audit: type=1400 audit(1722569592.857:2021): avc: denied { bind } for pid=10172 comm="syz.0.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.289952][T10181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'. [ 143.325117][T10181] loop0: detected capacity change from 0 to 256 [ 143.339843][T10184] loop2: detected capacity change from 0 to 2048 [ 143.356287][T10184] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 143.480818][T10043] veth0_vlan: entered promiscuous mode [ 143.495062][T10043] veth1_vlan: entered promiscuous mode [ 143.501056][T10193] loop4: detected capacity change from 0 to 1024 [ 143.510658][T10192] loop1: detected capacity change from 0 to 128 [ 143.531427][T10043] veth0_macvtap: entered promiscuous mode [ 143.555168][T10192] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.567947][ T29] audit: type=1400 audit(1722569593.218:2022): avc: denied { mount } for pid=10201 comm="syz.0.1571" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 143.595923][T10043] veth1_macvtap: entered promiscuous mode [ 143.596458][T10192] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.608201][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.622489][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.632354][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.642853][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.642877][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.663287][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.673149][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.683717][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.693592][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.704185][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.717034][T10043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.728164][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.738731][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.748651][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.759175][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.769025][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.779907][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.789948][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.793766][T10209] loop0: detected capacity change from 0 to 512 [ 143.800464][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.816663][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.827178][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.848907][T10209] EXT4-fs: Ignoring removed nobh option [ 143.848894][T10043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.853340][ T29] audit: type=1400 audit(1722569593.509:2023): avc: denied { mounton } for pid=10201 comm="syz.0.1571" path="/44/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 143.854653][T10192] netlink: 'syz.1.1569': attribute type 2 has an invalid length. [ 143.900345][T10209] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 143.902321][T10043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.910279][T10209] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.1571: casefold flag without casefold feature [ 143.917473][T10043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.917574][T10043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.948209][T10043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.987259][ T8921] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.004888][T10209] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1571: couldn't read orphan inode 13 (err -117) [ 144.050268][T10209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.132711][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1575'. [ 144.158249][T10229] loop3: detected capacity change from 0 to 2048 [ 144.169114][T10229] EXT4-fs: Ignoring removed bh option [ 144.174697][T10229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.194138][T10229] EXT4-fs: Ignoring removed nobh option [ 144.202203][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.238824][T10229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.299507][T10043] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor: bg 0: block 2: invalid block bitmap [ 144.322649][T10043] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 144.335062][T10043] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 144.384268][T10043] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 144.408812][T10043] EXT4-fs error (device loop3): empty_inline_dir:1833: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 144.431374][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.459959][T10043] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 144.513733][T10043] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 144.544272][T10043] EXT4-fs error (device loop3): empty_inline_dir:1833: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 144.577214][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.610577][T10043] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 144.636215][T10043] EXT4-fs error (device loop3): ext4_read_inline_dir:1564: inode #12: block 5: comm syz-executor: path /0/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 144.678300][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.698096][T10267] loop0: detected capacity change from 0 to 512 [ 144.709218][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.747979][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.751819][T10272] loop0: detected capacity change from 0 to 1024 [ 144.770981][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.809092][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 144.814869][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 144.814888][ T29] audit: type=1326 audit(1722569594.471:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10271 comm="syz.0.1589" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4ac8973b9 code=0x0 [ 144.858916][T10278] loop2: detected capacity change from 0 to 8192 [ 144.863207][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.880710][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.895650][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.903070][T10278] loop2: p1 p2 p3 p4 [ 144.911725][T10043] EXT4-fs warning (device loop3): empty_inline_dir:1840: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 144.922453][T10278] loop2: p1 start 17760256 is beyond EOD, truncated [ 144.935002][T10278] loop2: p2 size 64053 extends beyond EOD, truncated [ 144.943072][T10278] loop2: p3 start 458496 is beyond EOD, truncated [ 144.949537][T10278] loop2: p4 size 50331648 extends beyond EOD, truncated [ 145.008196][T10282] loop2: detected capacity change from 0 to 128 [ 145.016500][T10282] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.032482][T10282] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.090103][T10286] loop1: detected capacity change from 0 to 512 [ 145.098134][T10286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 145.106295][T10286] System zones: 1-12 [ 145.110416][T10286] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1593: Directory hole found for htree index block 0 [ 145.110673][T10290] loop2: detected capacity change from 0 to 1024 [ 145.125055][T10286] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 145.131493][T10290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.137929][T10286] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1593: Directory hole found for htree index block 0 [ 145.160075][T10286] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 145.195174][T10286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1593'. [ 145.223782][T10296] loop2: detected capacity change from 0 to 1024 [ 145.237111][T10296] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1596'. [ 145.315461][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 145.324441][T10303] netlink: 'syz.1.1597': attribute type 18 has an invalid length. [ 145.337198][T10303] vxlan0: entered promiscuous mode [ 145.694599][T10317] 9pnet_fd: Insufficient options for proto=fd [ 145.702609][T10313] loop4: detected capacity change from 0 to 1024 [ 145.709322][T10313] EXT4-fs: Ignoring removed i_version option [ 145.717257][T10318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1601'. [ 145.726447][T10316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1601'. [ 145.737344][T10313] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 145.825700][T10325] loop4: detected capacity change from 0 to 512 [ 145.834772][T10325] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.844361][T10325] EXT4-fs (loop4): orphan cleanup on readonly fs [ 145.851332][T10325] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1602: bg 0: block 248: padding at end of block bitmap is not set [ 145.865851][T10325] Quota error (device loop4): write_blk: dquota write failed [ 145.873590][T10325] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 145.883586][T10325] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.1602: Failed to acquire dquot type 1 [ 145.900751][T10325] EXT4-fs (loop4): 1 truncate cleaned up [ 145.927383][ T29] audit: type=1326 audit(1722569595.584:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.4.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 145.934411][T10335] loop4: detected capacity change from 0 to 1024 [ 145.951229][ T29] audit: type=1326 audit(1722569595.584:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.4.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 145.960695][T10335] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 145.981046][ T29] audit: type=1326 audit(1722569595.584:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.4.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 146.009884][T10335] loop4: detected capacity change from 0 to 2048 [ 146.018642][ T29] audit: type=1326 audit(1722569595.584:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.4.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 146.035895][T10337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10337 comm=syz.0.1605 [ 146.042345][ T29] audit: type=1326 audit(1722569595.584:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.4.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 146.078771][ T29] audit: type=1326 audit(1722569595.584:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.4.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 146.102817][ T29] audit: type=1326 audit(1722569595.584:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.4.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 146.135561][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.144811][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.162624][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1608'. [ 146.178875][T10347] ebt_among: src integrity fail: 100 [ 146.736510][T10375] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 146.748424][ T24] IPVS: starting estimator thread 0... [ 146.790392][T10378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10378 comm=syz.2.1616 [ 146.837624][T10376] IPVS: using max 2064 ests per chain, 103200 per kthread [ 146.862538][T10382] sctp: [Deprecated]: syz.2.1617 (pid 10382) Use of int in maxseg socket option. [ 146.862538][T10382] Use struct sctp_assoc_value instead [ 147.574401][T10403] netlink: 'syz.1.1624': attribute type 10 has an invalid length. [ 147.623259][T10403] team0: Failed to send options change via netlink (err -105) [ 147.630993][T10403] team0: Port device netdevsim1 added [ 147.634089][T10409] loop4: detected capacity change from 0 to 164 [ 147.651311][ T3335] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 147.663978][T10407] netlink: 'syz.1.1624': attribute type 10 has an invalid length. [ 147.758907][T10416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10416 comm=syz.4.1627 [ 147.778455][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 147.800416][T10418] pimreg: entered allmulticast mode [ 147.807050][T10418] pimreg: left allmulticast mode [ 148.017798][T10428] team0: entered promiscuous mode [ 148.023073][T10428] team_slave_0: entered promiscuous mode [ 148.029140][T10428] team_slave_1: entered promiscuous mode [ 148.057849][T10426] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1630'. [ 148.066977][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 148.089908][T10434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1631'. [ 148.122227][T10436] loop4: detected capacity change from 0 to 1024 [ 148.137071][T10436] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 148.293367][T10447] loop4: detected capacity change from 0 to 512 [ 148.302111][T10447] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 148.311654][T10447] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 148.322024][T10447] EXT4-fs (loop4): 1 truncate cleaned up [ 148.663579][ T6395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.741975][T10453] loop1: detected capacity change from 0 to 512 [ 148.767307][T10453] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.806465][T10453] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #20: comm syz.1.1635: corrupted inode contents [ 148.818588][T10453] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #20: comm syz.1.1635: mark_inode_dirty error [ 148.829635][T10427] team0: left promiscuous mode [ 148.832985][T10453] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #20: comm syz.1.1635: corrupted inode contents [ 148.834703][T10427] team_slave_0: left promiscuous mode [ 148.834764][T10427] team_slave_1: left promiscuous mode [ 148.873777][T10453] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #20: comm syz.1.1635: mark_inode_dirty error [ 148.887138][T10453] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #20: comm syz.1.1635: mark inode dirty (error -117) [ 148.902240][T10468] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10468 comm=syz.2.1638 [ 148.915565][T10453] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 148.939933][T10472] loop2: detected capacity change from 0 to 128 [ 148.947041][T10472] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 148.975683][T10457] chnl_net:caif_netlink_parms(): no params data found [ 149.044216][T10478] syzkaller1: entered promiscuous mode [ 149.049765][T10478] syzkaller1: entered allmulticast mode [ 149.088619][T10486] loop2: detected capacity change from 0 to 512 [ 149.097989][T10486] EXT4-fs: Ignoring removed orlov option [ 149.111334][T10457] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.118584][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.138731][T10457] bridge_slave_0: entered allmulticast mode [ 149.151929][T10486] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.163598][T10457] bridge_slave_0: entered promiscuous mode [ 149.172836][T10457] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.179927][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.202823][T10457] bridge_slave_1: entered allmulticast mode [ 149.209604][T10457] bridge_slave_1: entered promiscuous mode [ 149.235453][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.254520][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.289504][T10457] team0: Port device team_slave_0 added [ 149.296375][T10457] team0: Port device team_slave_1 added [ 149.324954][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.331960][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.357992][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.377282][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.384392][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.410474][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.431091][T10510] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 149.452827][T10457] hsr_slave_0: entered promiscuous mode [ 149.459380][T10457] hsr_slave_1: entered promiscuous mode [ 149.465771][T10457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.473529][T10457] Cannot create hsr debugfs directory [ 149.499772][T10514] loop2: detected capacity change from 0 to 512 [ 149.506508][T10514] EXT4-fs: Ignoring removed nobh option [ 149.523487][T10514] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.552071][T10514] EXT4-fs (loop2): 1 truncate cleaned up [ 149.576945][ T6395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.602224][T10514] loop2: detected capacity change from 512 to 0 [ 149.624823][ T6395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.656053][ T9952] syz-executor: attempt to access beyond end of device [ 149.656053][ T9952] loop2: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 149.688104][ T6395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.774417][T10524] loop1: detected capacity change from 0 to 256 [ 149.788144][T10524] vfat: Bad value for 'uni_xlate' [ 149.806002][ T6395] bridge_slave_1: left allmulticast mode [ 149.811757][ T6395] bridge_slave_1: left promiscuous mode [ 149.817640][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.857346][ T6395] bridge_slave_0: left allmulticast mode [ 149.863277][ T6395] bridge_slave_0: left promiscuous mode [ 149.869055][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.992232][T10140] syz.2.1558: attempt to access beyond end of device [ 149.992232][T10140] loop2: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 150.005688][T10140] syz.2.1558: attempt to access beyond end of device [ 150.005688][T10140] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 150.005724][T10140] syz.2.1558: attempt to access beyond end of device [ 150.005724][T10140] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 150.005776][T10140] syz.2.1558: attempt to access beyond end of device [ 150.005776][T10140] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 150.005801][T10140] syz.2.1558: attempt to access beyond end of device [ 150.005801][T10140] loop2: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 150.005826][T10140] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #15: block 8: comm syz.2.1558: unable to read itable block [ 150.005917][T10140] syz.2.1558: attempt to access beyond end of device [ 150.005917][T10140] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 150.005942][T10140] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.005958][T10140] EXT4-fs (loop2): I/O error while writing superblock [ 150.005989][T10140] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5810: IO failure [ 150.006008][T10140] syz.2.1558: attempt to access beyond end of device [ 150.006008][T10140] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 150.006028][T10140] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.006041][T10140] EXT4-fs (loop2): I/O error while writing superblock [ 150.006052][T10140] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #15: comm syz.2.1558: mark_inode_dirty error [ 150.006088][T10140] syz.2.1558: attempt to access beyond end of device [ 150.006088][T10140] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 150.006114][T10140] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.006129][T10140] EXT4-fs (loop2): I/O error while writing superblock [ 150.006160][T10140] syz.2.1558: attempt to access beyond end of device [ 150.006160][T10140] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 150.195135][T10140] EXT4-fs error (device loop2): ext4_get_inode_loc:4574: inode #2: block 5: comm syz.2.1558: unable to read itable block [ 150.207934][T10140] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.216732][T10140] EXT4-fs (loop2): I/O error while writing superblock [ 150.223765][T10140] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5810: IO failure [ 150.233038][T10140] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.242573][T10140] EXT4-fs (loop2): I/O error while writing superblock [ 150.249474][T10140] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.1558: mark_inode_dirty error [ 150.260849][T10140] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.269244][T10140] EXT4-fs (loop2): I/O error while writing superblock [ 150.276999][ T6395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.278039][ T6397] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 36) [ 150.296892][ T6397] Buffer I/O error on device loop2, logical block 36 [ 150.303724][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 150.303737][ T29] audit: type=1400 audit(1722569599.963:2195): avc: denied { listen } for pid=10538 comm="syz.0.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.309751][ T6397] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4559: inode #15: block 8: comm kworker/u8:21: unable to read itable block [ 150.309909][ T29] audit: type=1400 audit(1722569599.963:2196): avc: denied { accept } for pid=10538 comm="syz.0.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.334992][ T6397] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.349081][T10541] loop0: detected capacity change from 0 to 512 [ 150.367704][ T6397] EXT4-fs (loop2): I/O error while writing superblock [ 150.382790][ T6395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.392888][ T6397] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4559: inode #18: block 9: comm kworker/u8:21: unable to read itable block [ 150.408120][ T6397] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.417838][ T6397] EXT4-fs (loop2): I/O error while writing superblock [ 150.417953][ T6395] bond0 (unregistering): Released all slaves [ 150.425262][ T6397] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4559: inode #2: block 5: comm kworker/u8:21: unable to read itable block [ 150.444585][ T6397] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.453051][ T6397] EXT4-fs (loop2): I/O error while writing superblock [ 150.463200][T10140] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.464183][T10535] syzkaller1: entered promiscuous mode [ 150.471548][T10140] EXT4-fs (loop2): I/O error while writing superblock [ 150.476998][T10535] syzkaller1: entered allmulticast mode [ 150.558728][ T6395] hsr_slave_0: left promiscuous mode [ 150.565165][ T6395] hsr_slave_1: left promiscuous mode [ 150.571512][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.578979][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.589002][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.596656][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.607347][ T6395] veth1_macvtap: left promiscuous mode [ 150.612977][ T6395] veth0_macvtap: left promiscuous mode [ 150.618615][ T6395] veth1_vlan: left promiscuous mode [ 150.623983][ T6395] veth0_vlan: left promiscuous mode [ 150.751733][ T6395] team0 (unregistering): Port device team_slave_1 removed [ 150.765407][ T6395] team0 (unregistering): Port device team_slave_0 removed [ 150.981976][T10457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.991407][T10457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 151.017127][T10457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.033589][T10457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.064580][T10573] loop4: detected capacity change from 0 to 1024 [ 151.134491][T10457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.198640][T10576] loop4: detected capacity change from 0 to 4096 [ 151.205567][T10578] macvlan0: entered promiscuous mode [ 151.212822][T10457] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.235477][T10578] macvlan0: left promiscuous mode [ 151.293153][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.300403][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.320792][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.327912][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.370369][T10578] __nla_validate_parse: 1 callbacks suppressed [ 151.370402][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 151.411376][T10562] chnl_net:caif_netlink_parms(): no params data found [ 151.468262][ T6395] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.553025][ T6395] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.606828][T10562] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.614197][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.634747][T10562] bridge_slave_0: entered allmulticast mode [ 151.652667][T10562] bridge_slave_0: entered promiscuous mode [ 151.667999][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.680939][ T6395] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.700360][T10562] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.707581][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.716110][T10562] bridge_slave_1: entered allmulticast mode [ 151.727428][T10562] bridge_slave_1: entered promiscuous mode [ 151.767873][ T6395] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.786026][T10562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.797923][T10562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.845925][T10562] team0: Port device team_slave_0 added [ 151.859151][T10562] team0: Port device team_slave_1 added [ 151.955574][T10562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.962612][T10562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.988643][T10562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.002197][T10562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.009217][T10562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.035281][T10562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.047281][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.065602][ T6395] bridge_slave_1: left allmulticast mode [ 152.071331][ T6395] bridge_slave_1: left promiscuous mode [ 152.075066][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.077049][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.095690][ T6395] bridge_slave_0: left allmulticast mode [ 152.101553][ T6395] bridge_slave_0: left promiscuous mode [ 152.107285][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.202181][T10610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10610 comm=syz.4.1667 [ 152.270572][ T6395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.281439][ T6395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.292550][ T6395] bond0 (unregistering): Released all slaves [ 152.344686][T10562] hsr_slave_0: entered promiscuous mode [ 152.351267][T10562] hsr_slave_1: entered promiscuous mode [ 152.357856][T10562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.365470][T10562] Cannot create hsr debugfs directory [ 152.375831][ T6395] hsr_slave_0: left promiscuous mode [ 152.384311][ T6395] hsr_slave_1: left promiscuous mode [ 152.388691][ T29] audit: type=1400 audit(1722569602.067:2197): avc: denied { shutdown } for pid=10622 comm="syz.0.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.409631][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.417261][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.430207][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.437723][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.454320][ T6395] veth1_macvtap: left promiscuous mode [ 152.459987][ T6395] veth0_macvtap: left promiscuous mode [ 152.465613][ T6395] veth1_vlan: left promiscuous mode [ 152.470913][ T6395] veth0_vlan: left promiscuous mode [ 152.515089][T10632] loop0: detected capacity change from 0 to 1024 [ 152.523187][T10632] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.534169][T10632] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 152.546292][T10632] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 152.557324][T10632] journal_load_superblock: Cannot read journal superblock [ 152.564565][T10632] EXT4-fs (loop0): Could not load journal inode [ 152.612334][ T6395] team0 (unregistering): Port device team_slave_1 removed [ 152.624232][ T6395] team0 (unregistering): Port device team_slave_0 removed [ 152.632024][T10636] loop0: detected capacity change from 0 to 512 [ 152.639424][T10636] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 152.648964][T10636] EXT4-fs (loop0): group descriptors corrupted! [ 152.674747][T10457] veth0_vlan: entered promiscuous mode [ 152.681452][T10634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1674'. [ 152.682042][T10638] loop1: detected capacity change from 0 to 512 [ 152.690476][T10634] tipc: Started in network mode [ 152.690490][T10634] tipc: Node identity 6, cluster identity 4711 [ 152.707947][T10634] tipc: Node number set to 6 [ 152.732679][T10457] veth1_vlan: entered promiscuous mode [ 152.738987][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 152.756049][ T29] audit: type=1400 audit(1722569602.427:2198): avc: denied { read } for pid=10646 comm="syz.1.1676" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 152.786745][T10457] veth0_macvtap: entered promiscuous mode [ 152.795763][T10645] loop4: detected capacity change from 0 to 8192 [ 152.809808][T10457] veth1_macvtap: entered promiscuous mode [ 152.826846][T10645] loop4: p1 p2 p3 p4 [ 152.830991][T10645] loop4: p1 start 17760256 is beyond EOD, truncated [ 152.837699][T10645] loop4: p2 size 64053 extends beyond EOD, truncated [ 152.845802][T10645] loop4: p3 start 458496 is beyond EOD, truncated [ 152.852318][T10645] loop4: p4 size 50331648 extends beyond EOD, truncated [ 152.890796][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.901344][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.911232][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.921897][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.931890][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.942553][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.952484][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.963106][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.975998][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.003539][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.014162][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.024019][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.034556][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.044492][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.054972][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.065419][T10457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.075872][T10457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.087398][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.099676][T10457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.108466][T10457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.117355][T10457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.126289][T10457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.130603][ T29] audit: type=1400 audit(1722569602.808:2199): avc: denied { read } for pid=10671 comm="syz.4.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.247599][T10684] loop4: detected capacity change from 0 to 512 [ 153.258109][T10684] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 153.293881][ T29] audit: type=1400 audit(1722569602.968:2200): avc: denied { setopt } for pid=10683 comm="syz.4.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 153.325499][ T29] audit: type=1326 audit(1722569602.998:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 153.327565][T10699] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 153.349085][ T29] audit: type=1326 audit(1722569602.998:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 153.382907][ T29] audit: type=1326 audit(1722569602.998:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 153.406552][ T29] audit: type=1326 audit(1722569603.008:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10698 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x7ffc0000 [ 153.533888][T10562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.545794][T10562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.552758][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'. [ 153.570898][T10562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.590515][T10562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.601303][T10699] loop4: detected capacity change from 0 to 32768 [ 153.609771][T10704] loop3: detected capacity change from 0 to 8192 [ 153.656494][T10704] loop3: p1 p2 p3 p4 [ 153.657359][T10699] loop4: p1 p3 < p5 p6 > [ 153.660643][T10704] loop3: p1 start 17760256 is beyond EOD, truncated [ 153.671812][T10704] loop3: p2 size 64053 extends beyond EOD, truncated [ 153.682762][T10704] loop3: p3 start 458496 is beyond EOD, truncated [ 153.689302][T10704] loop3: p4 size 50331648 extends beyond EOD, truncated [ 153.704939][T10562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.727930][T10562] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.741856][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.749158][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.761541][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.768749][ T8958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.810229][T10718] usb usb5: usbfs: process 10718 (syz.3.1695) did not claim interface 0 before use [ 153.813304][T10562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.829998][T10562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.866684][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 153.915941][T10562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.000376][T10562] veth0_vlan: entered promiscuous mode [ 154.010054][T10562] veth1_vlan: entered promiscuous mode [ 154.032361][T10562] veth0_macvtap: entered promiscuous mode [ 154.043208][T10562] veth1_macvtap: entered promiscuous mode [ 154.055392][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.066060][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.075936][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.086466][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.096432][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.106897][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.116780][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.127245][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.137136][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.147630][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.159934][T10562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.173716][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.184327][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.194388][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.204900][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.214794][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.225247][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.235111][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.245566][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.255429][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.265876][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.276812][T10562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.289009][T10562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.298001][T10562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.306893][T10562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.315677][T10562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.362080][T10754] loop1: detected capacity change from 0 to 4096 [ 154.382079][T10759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'. [ 154.550042][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1707'. [ 154.561842][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1707'. [ 154.573174][T10774] Illegal XDP return value 4294967274 on prog (id 542) dev syz_tun, expect packet loss! [ 154.759858][T10789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.767187][T10789] IPv6: NLM_F_CREATE should be set when creating new route [ 154.774424][T10789] IPv6: NLM_F_CREATE should be set when creating new route [ 154.799152][T10794] loop4: detected capacity change from 0 to 128 [ 154.824555][T10799] loop3: detected capacity change from 0 to 512 [ 154.831272][T10799] ext4: Unknown parameter 'obj_type' [ 154.946377][T10811] loop3: detected capacity change from 0 to 512 [ 154.959333][T10814] loop1: detected capacity change from 0 to 128 [ 154.974726][T10814] vfat: Unknown parameter '00000000000000000000003' [ 154.992744][T10811] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.027547][T10811] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1718: corrupted in-inode xattr: invalid ea_ino [ 155.041505][T10811] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1718: couldn't read orphan inode 12 (err -117) [ 155.080257][T10811] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1718: Directory hole found for htree leaf block 0 [ 155.135781][T10811] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1718: Directory hole found for htree leaf block 0 [ 155.185313][T10811] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1718: Directory hole found for htree leaf block 0 [ 155.247615][T10811] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1718: Directory hole found for htree leaf block 0 [ 155.291304][T10811] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1718: Directory hole found for htree leaf block 0 [ 155.334978][T10811] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1718: Directory hole found for htree leaf block 0 [ 155.372802][T10820] loop4: detected capacity change from 0 to 512 [ 155.403378][T10820] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 155.424319][T10820] EXT4-fs (loop4): 1 truncate cleaned up [ 155.717753][T10823] loop3: detected capacity change from 0 to 128 [ 155.731987][T10823] vfat: Unknown parameter 'ÿÿÿÿ' [ 155.961481][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1724'. [ 155.970721][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 156.124865][T10826] netlink: 'syz.2.1722': attribute type 4 has an invalid length. [ 156.205342][T10823] loop3: detected capacity change from 0 to 128 [ 156.210371][T10837] netlink: 'syz.1.1725': attribute type 46 has an invalid length. [ 156.430034][T10848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10848 comm=syz.0.1727 [ 156.545210][T10850] loop1: detected capacity change from 0 to 2048 [ 156.672496][ T6397] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 156.741758][ T6397] EXT4-fs (loop1): Remounting filesystem read-only [ 156.789586][T10867] loop0: detected capacity change from 0 to 2048 [ 156.810036][T10867] EXT4-fs: dax option not supported [ 156.825565][T10820] EXT4-fs error (device loop4): ext4_map_blocks:609: inode #2: block 4: comm syz.4.1720: lblock 0 mapped to illegal pblock 4 (length 1) [ 156.869877][T10873] loop3: detected capacity change from 0 to 1024 [ 156.910729][T10878] __nla_validate_parse: 3 callbacks suppressed [ 156.910747][T10878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1732'. [ 157.323725][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 157.323743][ T29] audit: type=1326 audit(1722569607.003:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.4.1737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9cceb73b9 code=0x0 [ 157.573981][T10900] loop4: detected capacity change from 0 to 128 [ 157.630335][T10900] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 157.683288][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1739'. [ 157.752242][ T29] audit: type=1400 audit(1722569607.434:2261): avc: denied { ioctl } for pid=10898 comm="syz.4.1738" path="socket:[36319]" dev="sockfs" ino=36319 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.838938][T10907] loop1: detected capacity change from 0 to 2048 [ 157.924816][T10913] loop4: detected capacity change from 0 to 512 [ 157.940128][ T6395] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.960296][T10913] ext2: Unknown parameter 'fsname' [ 157.990353][ T6395] EXT4-fs (loop1): Remounting filesystem read-only [ 158.063524][T10913] loop4: detected capacity change from 0 to 128 [ 158.222096][T10925] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1745'. [ 158.475305][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 158.583895][T10942] loop2: detected capacity change from 0 to 512 [ 158.593337][T10942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.607033][T10942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 158.642705][T10942] System zones: 1-12 [ 158.665945][T10942] EXT4-fs (loop2): 1 truncate cleaned up [ 158.683777][T10946] loop1: detected capacity change from 0 to 512 [ 158.707441][T10946] EXT4-fs: Ignoring removed bh option [ 158.728398][T10946] EXT4-fs error (device loop1): __ext4_iget:4985: inode #15: block 1803188595: comm syz.1.1750: invalid block [ 158.744028][T10946] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1750: couldn't read orphan inode 15 (err -117) [ 158.844006][T10946] EXT4-fs error (device loop1): __ext4_iget:4985: inode #15: block 1803188595: comm syz.1.1750: invalid block [ 158.867160][T10946] qrtr: Invalid version 9 [ 158.967168][T10951] loop4: detected capacity change from 0 to 2048 [ 158.975687][T10953] syzkaller1: entered promiscuous mode [ 158.981287][T10953] syzkaller1: entered allmulticast mode [ 158.997352][T10953] wireguard0: entered promiscuous mode [ 159.002948][T10953] wireguard0: entered allmulticast mode [ 159.010723][ T6395] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 159.025987][ T6395] EXT4-fs (loop4): Remounting filesystem read-only [ 159.216707][T10966] loop3: detected capacity change from 0 to 2048 [ 159.230637][T10966] EXT4-fs: dax option not supported [ 159.288165][T10968] loop4: detected capacity change from 0 to 512 [ 159.297070][T10968] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1757: bg 0: block 35: padding at end of block bitmap is not set [ 159.313454][T10968] EXT4-fs (loop4): Remounting filesystem read-only [ 159.316697][T10966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1756'. [ 159.329295][T10968] EXT4-fs (loop4): 1 truncate cleaned up [ 159.335386][T10968] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 159.351040][T10968] loop4: detected capacity change from 0 to 1024 [ 159.357952][T10968] EXT4-fs: Ignoring removed oldalloc option [ 159.373454][T10968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'. [ 159.385372][ T29] audit: type=1400 audit(1722569609.075:2262): avc: denied { create } for pid=10967 comm="syz.4.1757" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 159.407093][ T29] audit: type=1400 audit(1722569609.095:2263): avc: denied { read write } for pid=10967 comm="syz.4.1757" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 159.429890][ T29] audit: type=1400 audit(1722569609.095:2264): avc: denied { open } for pid=10967 comm="syz.4.1757" path="/81/file1/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 159.480461][T10976] loop0: detected capacity change from 0 to 8192 [ 159.529716][T10976] loop0: p1 p2 p3 p4 [ 159.533753][T10976] loop0: p1 start 171008 is beyond EOD, truncated [ 159.540553][T10976] loop0: p2 size 1023739392 extends beyond EOD, truncated [ 159.548528][T10976] loop0: p3 size 100663552 extends beyond EOD, truncated [ 159.556638][T10976] loop0: p4 start 16711680 is beyond EOD, truncated [ 159.605252][T10985] loop0: detected capacity change from 0 to 512 [ 159.613781][T10985] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 159.622863][T10985] EXT4-fs (loop0): 1 truncate cleaned up [ 159.971358][T10989] loop1: detected capacity change from 0 to 512 [ 159.989528][T10989] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.014476][T10989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 160.031396][T10989] System zones: 1-12 [ 160.042237][T10989] EXT4-fs (loop1): 1 truncate cleaned up [ 160.176102][ T29] audit: type=1400 audit(1722569609.856:2265): avc: denied { setopt } for pid=10991 comm="syz.1.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.199072][ T29] audit: type=1400 audit(1722569609.856:2266): avc: denied { connect } for pid=10991 comm="syz.1.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.254726][T10997] loop1: detected capacity change from 0 to 2048 [ 160.276394][T10999] loop0: detected capacity change from 0 to 512 [ 160.320700][ T6395] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.340244][ T6395] EXT4-fs (loop1): Remounting filesystem read-only [ 160.450520][T11020] loop3: detected capacity change from 0 to 736 [ 160.467208][T11020] rock: directory entry would overflow storage [ 160.473458][T11020] rock: sig=0x3b10, size=4, remaining=3 [ 160.531716][ T29] audit: type=1400 audit(1722569610.216:2267): avc: denied { nlmsg_read } for pid=11012 comm="syz.0.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.929696][ T29] audit: type=1326 audit(1722569610.607:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6db973b9 code=0x7ffc0000 [ 160.953456][ T29] audit: type=1326 audit(1722569610.607:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.1.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f7d6db973b9 code=0x7ffc0000 [ 160.996110][T11045] loop3: detected capacity change from 0 to 512 [ 161.021481][T11045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.054477][T11054] loop0: detected capacity change from 0 to 512 [ 161.062309][T11045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 161.072057][T11045] System zones: 1-12 [ 161.077195][T11054] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 161.085810][T11045] EXT4-fs (loop3): 1 truncate cleaned up [ 161.094340][T11054] EXT4-fs (loop0): 1 truncate cleaned up [ 161.100467][T11054] EXT4-fs mount: 53 callbacks suppressed [ 161.100481][T11054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.121729][T11045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.301122][T10457] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.337177][T11069] netlink: 'syz.1.1779': attribute type 11 has an invalid length. [ 161.354182][T11071] loop3: detected capacity change from 0 to 2048 [ 161.385036][T11071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.412354][T10457] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.438266][T11084] loop1: detected capacity change from 0 to 512 [ 161.627351][T11091] loop3: detected capacity change from 0 to 1024 [ 161.635876][T11091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.678864][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.701773][T11101] loop2: detected capacity change from 0 to 128 [ 161.847696][T11118] loop0: detected capacity change from 0 to 2048 [ 161.857986][T11118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.872878][T11122] tmpfs: Unknown parameter 'fsuuid' [ 161.906051][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.940049][T11127] loop0: detected capacity change from 0 to 512 [ 161.949715][T11127] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 161.959495][T11127] EXT4-fs (loop0): 1 truncate cleaned up [ 161.965783][T11127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.312887][T10457] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.347738][T11147] ip6t_REJECT: ECHOREPLY is not supported [ 162.526013][T11160] loop2: detected capacity change from 0 to 2048 [ 162.540824][T11162] loop1: detected capacity change from 0 to 2048 [ 162.548889][T11160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.555546][T11160] EXT4-fs: Ignoring removed nobh option [ 162.563278][T11162] EXT4-fs: dax option not supported [ 162.568861][ T8958] ================================================================== [ 162.576968][ T8958] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 162.585685][ T8958] [ 162.588021][ T8958] read-write to 0xffff8881006311f0 of 8 bytes by task 11160 on cpu 1: [ 162.596188][ T8958] delete_from_page_cache_batch+0x4f3/0x700 [ 162.602126][ T8958] truncate_inode_pages_range+0x1c5/0x6b0 [ 162.607861][ T8958] truncate_inode_pages+0x24/0x30 [ 162.612904][ T8958] set_blocksize+0x267/0x280 [ 162.617501][ T8958] sb_set_blocksize+0x2c/0xb0 [ 162.622187][ T8958] ext4_fill_super+0xdca/0x39e0 [ 162.627043][ T8958] get_tree_bdev+0x256/0x2e0 [ 162.631661][ T8958] ext4_get_tree+0x1c/0x30 [ 162.636091][ T8958] vfs_get_tree+0x56/0x1d0 [ 162.640535][ T8958] do_new_mount+0x227/0x690 [ 162.645054][ T8958] path_mount+0x49b/0xb30 [ 162.649391][ T8958] __se_sys_mount+0x27c/0x2d0 [ 162.654164][ T8958] __x64_sys_mount+0x67/0x80 [ 162.658757][ T8958] x64_sys_call+0xd11/0x2e00 [ 162.663354][ T8958] do_syscall_64+0xc9/0x1c0 [ 162.667871][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.673774][ T8958] [ 162.676093][ T8958] read to 0xffff8881006311f0 of 8 bytes by task 8958 on cpu 0: [ 162.683640][ T8958] nr_blockdev_pages+0x7c/0xd0 [ 162.688410][ T8958] si_meminfo+0x87/0xd0 [ 162.692572][ T8958] update_defense_level+0x49/0x5b0 [ 162.697690][ T8958] defense_work_handler+0x1f/0x80 [ 162.702743][ T8958] process_scheduled_works+0x483/0x9a0 [ 162.708237][ T8958] worker_thread+0x526/0x700 [ 162.712858][ T8958] kthread+0x1d1/0x210 [ 162.716952][ T8958] ret_from_fork+0x4b/0x60 [ 162.721477][ T8958] ret_from_fork_asm+0x1a/0x30 [ 162.726257][ T8958] [ 162.728606][ T8958] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 162.735800][ T8958] [ 162.738127][ T8958] Reported by Kernel Concurrency Sanitizer on: [ 162.744272][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: kworker/0:7 Not tainted 6.11.0-rc1-syzkaller-00151-g183d46ff422e #0 [ 162.755031][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.765090][ T8958] Workqueue: events_long defense_work_handler [ 162.771192][ T8958] ================================================================== [ 162.785081][ T9444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.797948][T11163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1802'. [ 162.807569][T11160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.825013][T11160] netlink: 'syz.2.1801': attribute type 12 has an invalid length. [ 162.881266][T11160] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:0 [ 162.901335][T11160] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1801'. [ 162.918908][T10562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.